ROOT-APP-NPM-CVE-2026-26960 CVE-2026-26960 in @rootio/tar - Patched by Root

Root has patched CVE-2026-26960 in the @rootio/tar package for Root:npm. Multiple fixed versions available...

CVE-2026-26960

creationtimestamp| type| source ---|---|--- 2026-02-16 00:19:01+00:00| published-proof-of-concept| https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx 2026-02-20 12:01:00+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mfc2qe5pe62o 2026-02-20...