{"vulnerability": "CVE-2026-59873", "sightings": [{"uuid": "c3949630-920c-4acc-bfb1-3f0c3d049479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59873", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq5kohrtec2b", "content": "CVE-2026-59873 - node-tar\nA maliciously crafted file can cause a Node.js application that uses node-tar to run out of disk space and consume excessive CPU resources. This can happen when a user downloads a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nodetar #isaacs #CVE #infosec", "creation_timestamp": "2026-07-08T16:40:05.787019Z"}, {"uuid": "7ce6f458-d274-4d94-9edf-c66a1929426a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59873", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ob632iw2e", "content": "CVE-2026-59873 - node-tar: Decompression/parse DoS via unlimited input\nCVE ID : CVE-2026-59873\n \n Published : July 8, 2026, 4:16 p.m. | 58\u00a0minutes ago\n \n Description : node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard u...", "creation_timestamp": "2026-07-08T17:44:14.242846Z"}, {"uuid": "07523c39-2da7-4fc6-8700-b5c9c863f292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59873", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mti3rksj4k2k", "content": "Node.js\u5411\u3051\u89e3\u51cd\u30e9\u30a4\u30d6\u30e9\u30ea\u306bDoS\u8106\u5f31\u6027 - \u30c7\u30a3\u30b9\u30af\u67af\u6e07\u306e\u304a\u305d\u308c\n\n\u300cNode.js\u300d\u5411\u3051\u306b\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u30a2\u30fc\u30ab\u30a4\u30d6\u30e9\u30a4\u30d6\u30e9\u30ea\u300cnode-tar\u300d\u306b\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u5b9f\u8a3c\u30b3\u30fc\u30c9\u3082\u516c\u958b\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u30a2\u30fc\u30ab\u30a4\u30d6\u5168\u4f53\u306e\u5c55\u958b\u30b5\u30a4\u30ba\u3084\u30a8\u30f3\u30c8\u30ea\u6570\u3001\u5727\u7e2e\u7387\u306a\u3069\u306b\u5236\u9650\u304c\u306a\u3044\u3053\u3068\u306b\u8d77\u56e0\u3057\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u304c\u751f\u3058\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u8106\u5f31\u6027\u300cCVE-2026-59873\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u3002\n\n\u7d30\u5de5\u3055\u308c\u305f\u30a2\u30fc\u30ab\u30a4\u30d6\u30d5\u30a1\u30a4\u30eb\u3092\u5c55\u958b\u3057\u305f\u5834\u5408\u306b\u3001\u7269\u7406\u30c7\u30a3\u30b9\u30af\u306e\u7a7a\u304d\u5bb9\u91cf\u304c\u67af\u6e07\u3059\u308b\u307e\u3067\u5c55\u958b\u51e6\u7406\u3092\u7d99\u7d9a\u3055\u305b\u305f\u308a\u3001CPU\u30ea\u30bd\u30fc\u30b9\u3092\u6d6a\u8cbb\u3055\u305b\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\u3068\u3044\u3046\u3002\n\n\u300c\u540c7.5.18\u300d\u304a\u3088\u3073\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b...", "creation_timestamp": "2026-08-20T01:28:15.655886Z"}, {"uuid": "75d5db75-5055-4da3-b8f4-0ae187fb334a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59873", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqdqd5m7ne2l", "content": "\ud83d\udccc CVE-2026-59873 - node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, e... https://www.cyberhub.blog/cves/CVE-2026-59873", "creation_timestamp": "2026-07-11T03:37:07.250009Z"}, {"uuid": "84b46d42-5cb5-4cd8-89f5-376cd610af58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59873", "type": "published-proof-of-concept", "source": "https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw", "content": "", "creation_timestamp": "2026-07-20T22:35:07.635537Z"}, {"uuid": "8b326240-9248-40aa-a2a9-2847abdcbf50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59873", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmn4h2325", "content": "\n\ud83d\udea8 New CRITICAL CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-59873 impacts tar in 3 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/627\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-22T12:01:11.223923Z"}]}