01 Record

CVE-2026-73566

node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

HighPUBLISHEDCNA: GitHub_M

Base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

02 Description

node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

Published: 2026-08-13 17:39Z1 DAY AGO
Last updated: 2026-08-13 17:39Z1 DAY AGO
Reserved: 2026-08-12
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: High (CVSS 7.5)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-400 CWE-674
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: bc7d0baf56a584f7841b93f1db4ebe308c145c795f62c3f961c5d6e1c956e87a

VendorProductVersionsPlatforms

isaacsnode-tar< 7.5.21—