PT-2026-5047

🗓️ 27 Jan 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

node-tar before 7.5.7 allows path traversal via mismatched hardlink checks; fixed in 7.5.7.

Reporter	Title	Published	Views	Family All 105
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.	31 Mar 202613:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	17 Mar 202603:46	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway	2 Feb 202614:19	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for April 2026.	5 May 202621:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tar-6.2.1.tgz	28 Apr 202620:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to arbitrary code execution, loss of confidentiality and denial of service	6 May 202613:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses tar-7.5.2.tgz which is vulnerable to CVE-2026-24842	5 May 202609:44	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in node-tar affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	4 May 202614:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (February 2026)	27 Feb 202603:34	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities have been found in IBM Verify Identity Access Digital Credentials	31 Mar 202600:38	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/openSUSE-SU-2026:10410-1
t	www.t.me/cveNotify/150069
github	www.github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24842.json
cve	www.cve.org/CVERecord
github	www.github.com/isaacs/node-tar
twitter	www.twitter.com/VulmonFeeds/status/2016466164138840552
twitter	www.twitter.com/_cvereports/status/2016567156821885086
twitter	www.twitter.com/dailycve/status/2023988200226586681
reddit	www.reddit.com/r/AutoGenAI/comments/1qvscey/ag2_v0105_released

23 Mar 2026 00:00Current

5.2Medium risk

Vulners AI Score5.2

CVSS 28.5

CVSS 3.18.2

EPSS0.00027

SSVC

node tar hardlink vulnerability path traversal archive security version seven point five point seven