ROOT-APP-NPM-CVE-2026-59873 CVE-2026-59873 in @rootio/tar - Patched by Root

Root has patched CVE-2026-59873 in the @rootio/tar package for Root:npm. Multiple fixed versions available...

CVE-2026-59873 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, gitlab-rails-ce, opensearch-dashboards-fips, prism, homepage, graalvm, sqlpad, wazuh-dashboard-fips, pulumi, lerna, code-server, gitlab-rails-ce-fips, kubeflow-centraldashboard, kibana, npm, actions-runner, saf...

CVE-2026-59873 vulnerabilities

Vulnerabilities for packages: code-server, kubeflow-centraldashboard, saf, npm, prism, lerna, sqlpad, pulumi...

Linux Distros Unpatched Vulnerability : CVE-2026-59873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry count...

CVE-2026-59873

creationtimestamp| type| source ---|---|--- 2026-07-08 16:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5kohrtec2b 2026-07-08 17:44:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ob632iw2e 2026-07-11 03:37:07+00:00| seen|...

CVE-2025-59873 Session Token Exposure via URL Query Parameters

An information exposure vulnerability exists in Vulnerability in HCL Software ZIE for Web. The application transmits sensitive session tokens and authentication identifiers within the URL query parameters . An attacker who gains access to any network log or operates a site linked from the...