{"schemaVersion":3,"id":"CVE-2026-59875","aliases":["UBUNTU-CVE-2026-59875","DEBIAN-CVE-2026-59875","CGA-2rcx-qq7f-wc8r","CGA-2x5p-fvgp-rc95","CGA-36hj-m7j8-pqmw","CGA-39x6-qc24-x4p3","CGA-3c32-fp33-6v3g","CGA-44x7-mmg6-2vfq","CGA-47hh-76gc-hq26","CGA-4994-78mj-mv3f","CGA-4v98-q9p9-r3m8","CGA-7vvg-2c3q-c996","CGA-956r-v9wm-2qvg","CGA-9gp9-h55q-2mqq","CGA-c535-mrf4-3932","CGA-c6cp-v3fc-4m6q","CGA-f445-8348-pv4x","CGA-fr59-7vc7-46jj","CGA-gw34-jfmx-r8c5","CGA-mc59-6p59-mf48","CGA-pwrj-f396-r26q","CGA-qp25-rqc6-r5h9","CGA-r2r4-rg5v-3v3h","CGA-r3gr-9mh9-jp8m","CGA-rjww-p8v2-47pw","CGA-rmjp-v9g3-w3w7","CGA-vmgg-rxg3-fmrm","CGA-vqmv-cjpx-383r","CGA-vrwr-hf4c-qv4q","CGA-xw79-gqfh-prcm","GHSA-gvwx-54wh-qm9j","CGA-247h-jp78-7343","CGA-24q4-8rj2-q7wr","CGA-28v4-g8mw-r4cf","CGA-37j4-96m8-7xq2","CGA-38w7-x644-m5v7","CGA-3m82-6vqf-4m77","CGA-3vrc-cp4r-jfgm","CGA-4574-5985-93mh","CGA-48f2-vpvh-p7wj","CGA-4g79-j7q4-5f22","CGA-55wq-h9cf-4ghh","CGA-56j3-4qvx-xr5q","CGA-5hcf-7mcm-v223","CGA-5jh3-gc7q-837q","CGA-5jv9-qh9c-38rm","CGA-5m3r-ccmc-mffp","CGA-5m79-gpvp-9jmr","CGA-5x4w-6f2g-v6qc","CGA-66m4-78pq-27xc","CGA-6p2p-x3mw-34wg","CGA-73qh-r557-p2qp","CGA-76p9-fmr6-c4rc","CGA-788q-873j-3q5m","CGA-79jx-7q8p-3wq9","CGA-7hx5-3246-gq48","CGA-7jrf-hg2w-mrvc","CGA-7m2p-f98g-c9xj","CGA-7xqg-cggw-49vg","CGA-7xx3-92h7-m4x9","CGA-82mp-mh3h-5qrg","CGA-83c7-q23p-8cjh","CGA-85qx-mh5v-25h8","CGA-94jj-fcrp-x4gc","CGA-9m7j-967c-q73g","CGA-9qf3-xh3w-j2c3","CGA-c8qv-fhhx-rx9r","CGA-crr2-62hx-65mj","CGA-cxpj-2hh7-h4gm","CGA-f3q3-hcwc-3r6r","CGA-f3q5-hmf6-v34v","CGA-f6h9-g45p-jcc8","CGA-f9j4-j6v2-mqj8","CGA-fm9m-5j77-v4px","CGA-fmff-rrx7-2phh","CGA-frr5-82mm-v7xv","CGA-fx8p-4m44-c4g8","CGA-fxq7-v2c7-96hc","CGA-g7x7-pvxg-q8p5","CGA-gh2f-8vvj-6wwh","CGA-gjx7-8329-m23j","CGA-gxwv-cxmq-c89c","CGA-h3v3-hmhw-vvg4","CGA-hfvh-hqvc-97jx","CGA-hgjr-ph5x-xqpr","CGA-hmq9-q7f5-rp7c","CGA-hp77-hqmp-pf7g","CGA-hvcw-r5c9-246p","CGA-j52g-pqjq-592j","CGA-jj4w-pvr7-vf6f","CGA-jpw5-vfmg-4mxr","CGA-jr2p-3hmv-9jx4","CGA-m238-hx4v-mj54","CGA-m744-8p4f-r7cr","CGA-m9rg-78v2-7vc2","CGA-mhmp-6636-wx8g","CGA-mvgf-6635-wvj9","CGA-mxfr-wq9g-62c4","CGA-p284-r48p-g49x","CGA-p294-qm35-rgmq","CGA-p8gm-w2v9-4hrw","CGA-pgp5-9336-gg8h","CGA-pp9f-7685-j8v2","CGA-q3fj-g3hj-269m","CGA-q6m6-92q7-vgm3","CGA-qqxm-h9qc-4924","CGA-r34j-vpcw-576r","CGA-rf8x-q2g3-r8x2","CGA-rh3m-rc9x-8cc8","CGA-rqgm-vhh6-xqjr","CGA-vpjv-2jfc-678g","CGA-w352-qjwm-5wxq","CGA-wcc3-628w-c5w8","CGA-wp5v-mwqg-f34r","CGA-wrq2-435r-33rr","CGA-wrqj-q99r-359m","CGA-x99f-4rx8-7jvg","CGA-xf2h-x72m-3rfc","CGA-xm9c-6x92-m7c3","CGA-xwq8-vp4w-w2vp"],"status":"published","duplicateOf":null,"title":null,"description":"node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.17, node-tar does not strip NUL bytes from PAX path and linkpath records in src/pax.ts, allowing a crafted archive with values to reach fs.lstat or fs.open and terminate the process with an uncaught exception. This issue is fixed in version 7.5.17.","dates":{"published":"2026-07-08T15:20:29.997Z","modified":"2026-07-09T13:45:44.160Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00507,"percentile":0.42288,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00507},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00507,"percentile":0.42288}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00507,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00507,"percentile":0.42288}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-248","name":"Uncaught Exception","description":"An exception is thrown from a function, but it is not caught.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/248.html"}],"affected":[{"vendor":"chainguard","product":"actions-runner","name":"actions-runner","label":"actions-runner","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/actions-runner","purlType":"apk","versions":[{"text":"< 2.336.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.336.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"code-server","name":"code-server","label":"code-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/code-server","purlType":"apk","versions":[{"text":"< 4.129.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.129.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"< 18.1.6-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.6-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"< 19.0.4-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.4-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"< 19.1.2-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.2-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.2","name":"gitlab-rails-ce-19.2","label":"gitlab-rails-ce-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.2","purlType":"apk","versions":[{"text":"< 19.2.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"< 18.1.6-r61","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.6-r61","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"< 18.10.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.10.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"< 18.11.12-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.12-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"< 19.0.4-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.4-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"< 19.1.2-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.2-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.2","name":"gitlab-rails-ce-fips-19.2","label":"gitlab-rails-ce-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.1-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.1-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"graalvm-25-ce-nodejs","name":"graalvm-25-ce-nodejs","label":"graalvm-25-ce-nodejs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/graalvm-25-ce-nodejs","purlType":"apk","versions":[{"text":"< 25.0.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.0.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jupyter-base-notebook","purlType":"apk","versions":[{"text":"< 7.6.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2","name":"kibana-9.2","label":"kibana-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2","purlType":"apk","versions":[{"text":"< 9.2.8-r17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r17","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2-iamguarded","name":"kibana-9.2-iamguarded","label":"kibana-9.2-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2-iamguarded","purlType":"apk","versions":[{"text":"< 9.2.8-r17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r17","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 1.10.0-r25","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.0-r25","eol":null,"hubHref":null},{"vendor":"chainguard","product":"lerna","name":"lerna","label":"lerna","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/lerna","purlType":"apk","versions":[{"text":"< 9.0.7-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.7-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"npm","name":"npm","label":"npm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/npm","purlType":"apk","versions":[{"text":"< 12.0.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.0.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"< 2.19.6-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.6-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"< 2.19.5-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.5-r18","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pnpm-stage0","name":"pnpm-stage0","label":"pnpm-stage0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pnpm-stage0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"prism","name":"prism","label":"prism","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/prism","purlType":"apk","versions":[{"text":"< 5.16.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.16.0-r1","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"nutanix-prism","label":"Nutanix Prism Central","category":"server-app"}},"hubHref":null},{"vendor":"chainguard","product":"pulumi-language-nodejs","name":"pulumi-language-nodejs","label":"pulumi-language-nodejs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pulumi-language-nodejs","purlType":"apk","versions":[{"text":"< 3.253.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.253.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"saf","name":"saf","label":"saf","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/saf","purlType":"apk","versions":[{"text":"< 1.6.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"sqlpad","name":"sqlpad","label":"sqlpad","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/sqlpad","purlType":"apk","versions":[{"text":"< 7.5.7-r29","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.7-r29","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tensorflow-gpu-jupyter","name":"tensorflow-gpu-jupyter","label":"tensorflow-gpu-jupyter","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tensorflow-gpu-jupyter","purlType":"apk","versions":[{"text":"< 2.21.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.21.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard","name":"wazuh-dashboard","label":"wazuh-dashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard","purlType":"apk","versions":[{"text":"< 4.14.6-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.6-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-fips","name":"wazuh-dashboard-fips","label":"wazuh-dashboard-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-fips","purlType":"apk","versions":[{"text":"< 4.14.6-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.6-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"code-server","name":"code-server","label":"code-server","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/code-server","purlType":"apk","versions":[{"text":"< 4.129.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.129.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jupyter-base-notebook","purlType":"apk","versions":[{"text":"< 7.6.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.3-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 1.10.0-r25","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.0-r25","eol":null,"hubHref":null},{"vendor":"wolfi","product":"lerna","name":"lerna","label":"lerna","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/lerna","purlType":"apk","versions":[{"text":"< 9.0.7-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.7-r11","eol":null,"hubHref":null},{"vendor":"wolfi","product":"npm","name":"npm","label":"npm","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/npm","purlType":"apk","versions":[{"text":"< 12.0.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.0.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"pnpm-stage0","name":"pnpm-stage0","label":"pnpm-stage0","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/pnpm-stage0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"prism","name":"prism","label":"prism","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/prism","purlType":"apk","versions":[{"text":"< 5.16.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.16.0-r1","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"nutanix-prism","label":"Nutanix Prism Central","category":"server-app"}},"hubHref":null},{"vendor":"wolfi","product":"pulumi-language-nodejs","name":"pulumi-language-nodejs","label":"pulumi-language-nodejs","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/pulumi-language-nodejs","purlType":"apk","versions":[{"text":"< 3.253.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.253.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"saf","name":"saf","label":"saf","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/saf","purlType":"apk","versions":[{"text":"< 1.6.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"sqlpad","name":"sqlpad","label":"sqlpad","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/sqlpad","purlType":"apk","versions":[{"text":"< 7.5.7-r29","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.7-r29","eol":null,"hubHref":null},{"vendor":"debian","product":"node-tar","name":"node-tar","label":"node-tar","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-tar","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 7.5.19+~4.0.1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 7.5.19+~4.0.1-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-tar","name":"node-tar","label":"node-tar","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-tar","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"isaacs","product":"node-tar","name":"node-tar","label":"node-tar","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 7.5.17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.17","eol":null,"hubHref":"/vendor/isaacs/node-tar"},{"vendor":"Npm","product":"tar","name":"tar","label":"tar","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/tar","purlType":"npm","versions":[{"text":"< 7.5.17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.17","eol":null,"hubHref":null}],"affectedCount":52,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/isaacs/node-tar/security/advisories/GHSA-gvwx-54wh-qm9j","label":"github.com/isaacs/node-tar/security/advisories/GHSA-gvwx-54wh-qm9j","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB"]},{"url":"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3","label":"github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/isaacs/node-tar/releases/tag/v7.5.17","label":"github.com/isaacs/node-tar/releases/tag/v7.5.17","hostname":"github.com","tags":["X Refsource MISC","WEB"]},{"url":"https://ubuntu.com/security/CVE-2026-59875","label":"ubuntu.com/security/CVE-2026-59875","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59875","label":"www.cve.org/CVERecord?id=CVE-2026-59875","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-59875","label":"security-tracker.debian.org/tracker/CVE-2026-59875","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59875.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59875.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59875","label":"nvd.nist.gov/vuln/detail/CVE-2026-59875","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/isaacs/node-tar","label":"github.com/isaacs/node-tar","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-GFPQ-J9H7-PHJG"]},"timeline":[{"kind":"published","date":"2026-07-08T15:20:29.997Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-09T13:45:44.160Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T21:19:50.655Z","stale":false,"partial":false}}