Path Traversal node-tar Dependency in Jira Software Data Center

🗓️ 12 Mar 2026 20:28:12Reported by security-metrics-botType

High severity path traversal in Jira Software Data Center via node-tar; upgrade to fixed versions.

Reporter	Title	Published	Views	Family All 99
ibm	Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway	2 Feb 202614:19	–	ibm
ibm	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tar-6.2.1.tgz	13 Apr 202613:07	–	ibm
ibm	Security Bulletin: Data Synchronization App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	14 Jul 202612:55	–	ibm
ibm	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for April 2026.	5 May 202621:39	–	ibm
ibm	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules.	27 Mar 202616:53	–	ibm
ibm	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to arbitrary code execution, loss of confidentiality and denial of service	6 May 202613:05	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	18 May 202606:56	–	ibm
ibm	Security Bulletin: Maximo AI Service uses tar-7.4.3.tgz which is vulnerable to CVE-2026-23745 and CVE-2026-23950.	31 Mar 202613:40	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in IBM Watsonx BI Assistant for CP4D	27 Apr 202616:13	–	ibm
ibm	Security Bulletin: Security Vulnerabilities have been found in IBM Verify Identity Access Digital Credentials	31 Mar 202600:38	–	ibm