ROOT-APP-NPM-CVE-2026-24842 CVE-2026-24842 in @rootio/tar - Patched by Root

Root has patched CVE-2026-24842 in the @rootio/tar package for Root:npm. Multiple fixed versions available...

pnpm-10.32.1-1.1 on GA media (moderate)

pnpm-10.32.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10410-1 Rating: moderate Cross-References: CVE-2026-24842 CVSS scores: CVE-2026-24842 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2026-24842 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N...

CVE-2026-24842 vulnerabilities

Vulnerabilities for packages: pnpm-stage0, saf, opensearch-dashboards, kubeflow-pipelines, wazuh-dashboard-fips, gitlab-rails-ce-fips, renovate, wazuh-dashboard, code-server, kubeflow-katib, graalvm, actions-runner, redisinsight, tileserver-gl, tensorflow-cpu-jupyter, py3-jupyterlab,...

CVE-2026-24842

creationtimestamp| type| source ---|---|--- 2026-01-27 20:50:05+00:00| published-proof-of-concept| https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v 2026-01-28 01:30:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdh4qvlwf72t 2026-01-28 13:02:50+00:00|...