ROOT-APP-NPM-CVE-2026-24842 CVE-2026-24842 in tar - Patched by Root

Root has patched CVE-2026-24842 in the tar package for Root:npm. Multiple fixed versions available...

pnpm-10.32.1-1.1 on GA media (moderate)

pnpm-10.32.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10410-1 Rating: moderate Cross-References: CVE-2026-24842 CVSS scores: CVE-2026-24842 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2026-24842 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N...

CVE-2026-24842 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, kubeflow-katib, sqlpad, tileserver-gl, pulumi, actions-runner, kibana, drupal, py3-jupyterlab, renovate, lerna, opensearch-dashboards-fips, jupyter-base-notebook, prism, gitlab-rails-ce-fips, graalvm, vitess, pnpm-stage0, code-server,...

CVE-2026-24842

creationtimestamp| type| source ---|---|--- 2026-01-27 20:50:05+00:00| published-proof-of-concept| https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v 2026-01-28 01:30:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdh4qvlwf72t 2026-01-28 13:02:50+00:00|...