Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses tar which is vulnerable to CVE-2026-53655

Summary IBM Maximo Application Suite - Visual Inspection component uses tar which is vulnerable to CVE-2026-53655, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-53655 DESCRIPTION: node-tar is a full-featured Tar for Node.j...

Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway

Summary Security Vulnerabilities affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-48779 DESCRIPTION: ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to but not including 5.2.5, from 6.0.0 up to 6.2.4,...

CVE-2026-53655 vulnerabilities

Vulnerabilities for packages: tileserver-gl, renovate, drupal, gitlab-rails-ce-fips, gemini-cli, thingsboard-fips, jupyter-base-notebook, pnpm-stage0, actions-runner, sqlpad, wazuh-dashboard-fips, tensorflow-gpu-jupyter, lerna, opensearch-dashboards-fips, tensorflow-cpu-jupyter, thingsboard,...

@0xwork/connect (>=0.1.8, <=0.1.9), @actagent/fs-safe (0.3.0) +797 more potentially affected by CVE-2026-53655 via tar (>=7.0.0, <=7.5.15)

tar NPM version =7.0.0, =0.1.8, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.5.2-zh, =0.1.1, =0.1.1, =0.59.0, =2.17.11, =1.9.5, =1.0.2, =8.8.3, =8.11.4 and more Source cves: CVE-2026-53655 Source advisory: OSV:GHSA-VMF3-W455-68VH...

@0xwork/connect (>=0.1.8, <=0.1.9), @actagent/fs-safe (0.3.0) +797 more potentially affected by CVE-2026-53655 via tar (>=7.0.0, <=7.5.15)

tar NPM version =7.0.0, =0.1.8, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.5.2-zh, =0.1.1, =0.1.1, =0.59.0, =2.17.11, =1.9.5, =1.0.2, =8.8.3, =8.11.4 and more Source cves: CVE-2026-53655 Source advisory: SNYK:JS-TAR-17342362...

@0xwork/connect (>=0.1.8, <=0.1.9), @actagent/fs-safe (0.3.0) +797 more potentially affected by CVE-2026-53655 via tar (>=7.0.0, <=7.5.15)

tar NPM version =7.0.0, =0.1.8, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =2026.5.2-zh, =0.1.1, =0.1.1, =0.59.0, =2.17.11, =1.9.5, =1.0.2, =8.8.3, =8.11.4 and more Source cves: CVE-2026-53655 Source advisory: GHSA-VMF3-W455-68VH...

org.webjars.npm:canvas (>=2.5.0, <=2.6.0), org.webjars.npm:color-thief (2.2.5) +12 more potentially affected by CVE-2026-53655 via org.webjars.npm:tar (>=0.1.20, <=4.4.19)

org.webjars.npm:tar MAVEN version =0.1.20, =2.5.0, =0.97.5, =0.2.0, =3.4.0, =0.6.19, =2.0.0, =3.1.4, =3.4.1 - org.webjars.npm:tar.gz 1.0.7 Source cves: CVE-2026-53655 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17342363...