{"vulnerability": "CVE-2026-59874", "sightings": [{"uuid": "1f425092-e76c-4567-a6c2-e4c19a5ed0ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59874", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5opkl5622x", "content": "CVE-2026-59874 - node-tar: Negative tar entry size causes infinite loop in archive replace\nCVE ID : CVE-2026-59874\n \n Published : July 8, 2026, 4:16 p.m. | 58\u00a0minutes ago\n \n Description : node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace ...", "creation_timestamp": "2026-07-08T17:52:19.887016Z"}, {"uuid": "3a480704-782e-4e06-a340-ca5fe4d17f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59874", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqecrablfk2f", "content": "\ud83d\udccc CVE-2026-59874 - node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 ... https://www.cyberhub.blog/cves/CVE-2026-59874", "creation_timestamp": "2026-07-11T09:07:08.220120Z"}, {"uuid": "a6d30d19-c6d9-4184-a601-13b59cadd9e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59874", "type": "published-proof-of-concept", "source": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w", "content": "", "creation_timestamp": "2026-07-20T22:35:09.830652Z"}, {"uuid": "86c23190-1b17-4e07-bb75-24df70196583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59874", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmoufus24", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-59874 impacts tar in 3 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/628\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-22T12:01:13.388267Z"}]}