PT-2026-24117

🗓️ 01 Jan 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

node-tar before 7.5.11 allows drive-relative symlinks to escape extraction dir and overwrite files.

Reporter	Title	Published	Views	Family All 140
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to arbitrary code execution (CVE-2026-33937, CVE-2026-33938, CVE-2026-33940, CVE-2026-33941) and denial of service (CVE-2026-33939)	7 May 202613:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules.	21 Apr 202618:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	24 Apr 202617:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses tar-7.5.9.tgz which is vulnerable to CVE-2026-31802	5 May 202611:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules.	24 Apr 202614:07	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway	31 Mar 202615:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to arbitrary code execution, loss of confidentiality and denial of service	6 May 202613:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Watsonx BI Assistant for CP4D	27 Apr 202616:13	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Handlebars	5 May 202609:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Security, Handlebars, Apache MINA and Apache Tomcat might affect IBM Storage Defender Copy Data Management	26 Jun 202617:03	–	ibm

Source	Link
t	www.t.me/msrcreports/3412
osv	www.osv.dev/vulnerability/ghsa-gh4j-gqv2-49f6
osv	www.osv.dev/vulnerability/CVE-2026-33916
osv	www.osv.dev/vulnerability/CVE-2026-24842
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-21637
osv	www.osv.dev/vulnerability/CVE-2026-25896
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-31802
osv	www.osv.dev/vulnerability/CVE-2026-32280
osv	www.osv.dev/vulnerability/ghsa-5j98-mcp5-4vw2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-33349

04 Jun 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 48.2

CVSS 3.15.5 - 9.8

EPSS0.01286

SSVC