Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-11 | 1 | Patch1 |
| 2026-08-08 | 1 | General1 |
CVE-2026-59874: node-tar Infinite Loop Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04sl4zJ0
Post summary
The text references CVE‑2026‑59874 with a generic headline and a link, but no actionable or detailed information is provided.
🚨 HIGH severity CVE-2026-59874 (CVSS 7.5) affects node-tar library for Node.js <7.5.18. Malicious tar headers cause infinite parsing loops leading to DoS. Update to v7.5.18 immediately. #CVE #Vulnerability #PatchNow https://t.co/WE2Rdqny2T
Post summary
The tweet alerts users to a high‑severity CVE‑2026‑59874 affecting node‑tar versions <7.5.18, explains that malicious tar headers trigger infinite loops causing a DoS, and urges an immediate update to v7.5.18.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | isaacs | tar | - | node.js | - |