{"vulnerability": "cve-2026-5987", "sightings": [{"uuid": "c3949630-920c-4acc-bfb1-3f0c3d049479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59873", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq5kohrtec2b", "content": "CVE-2026-59873 - node-tar\nA maliciously crafted file can cause a Node.js application that uses node-tar to run out of disk space and consume excessive CPU resources. This can happen when a user downloads a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nodetar #isaacs #CVE #infosec", "creation_timestamp": "2026-07-08T16:40:05.787019Z"}, {"uuid": "7ce6f458-d274-4d94-9edf-c66a1929426a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59873", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ob632iw2e", "content": "CVE-2026-59873 - node-tar: Decompression/parse DoS via unlimited input\nCVE ID : CVE-2026-59873\n \n Published : July 8, 2026, 4:16 p.m. | 58\u00a0minutes ago\n \n Description : node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard u...", "creation_timestamp": "2026-07-08T17:44:14.242846Z"}, {"uuid": "1f425092-e76c-4567-a6c2-e4c19a5ed0ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59874", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5opkl5622x", "content": "CVE-2026-59874 - node-tar: Negative tar entry size causes infinite loop in archive replace\nCVE ID : CVE-2026-59874\n \n Published : July 8, 2026, 4:16 p.m. | 58\u00a0minutes ago\n \n Description : node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace ...", "creation_timestamp": "2026-07-08T17:52:19.887016Z"}, {"uuid": "6320c2d3-230d-4c55-a720-6b43c73cc5bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59879", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq63ma3dqe2i", "content": "CVE-2026-59879 - Immutable.js `List` 32-bit trie overflow \u2192 unrecoverable DoS\nCVE ID : CVE-2026-59879\n \n Published : July 8, 2026, 5:17 p.m. | 3\u00a0hours, 57\u00a0minutes ago\n \n Description : Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Li...", "creation_timestamp": "2026-07-08T21:43:06.912728Z"}, {"uuid": "75d5db75-5055-4da3-b8f4-0ae187fb334a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59873", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqdqd5m7ne2l", "content": "\ud83d\udccc CVE-2026-59873 - node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, e... https://www.cyberhub.blog/cves/CVE-2026-59873", "creation_timestamp": "2026-07-11T03:37:07.250009Z"}, {"uuid": "cb56de77-75c0-4d11-8cad-d2f0c120599a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59879", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqe7fxgexo2n", "content": "\ud83d\udccc CVE-2026-59879 - Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the ... https://www.cyberhub.blog/cves/CVE-2026-59879", "creation_timestamp": "2026-07-11T08:07:07.789686Z"}, {"uuid": "3a480704-782e-4e06-a340-ca5fe4d17f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59874", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqecrablfk2f", "content": "\ud83d\udccc CVE-2026-59874 - node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 ... https://www.cyberhub.blog/cves/CVE-2026-59874", "creation_timestamp": "2026-07-11T09:07:08.220120Z"}, {"uuid": "b0efd154-281f-4688-8dee-80afb8aa1e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59871", "type": "published-proof-of-concept", "source": "https://github.com/isaacs/node-tar/security/advisories/GHSA-w8wr-v893-vjvp", "content": "", "creation_timestamp": "2026-07-20T22:35:05.188202Z"}, {"uuid": "84b46d42-5cb5-4cd8-89f5-376cd610af58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59873", "type": "published-proof-of-concept", "source": "https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw", "content": "", "creation_timestamp": "2026-07-20T22:35:07.635537Z"}, {"uuid": "a6d30d19-c6d9-4184-a601-13b59cadd9e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59874", "type": "published-proof-of-concept", "source": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w", "content": "", "creation_timestamp": "2026-07-20T22:35:09.830652Z"}, {"uuid": "982667e9-5340-46e5-ad35-fb552b35d5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59875", "type": "published-proof-of-concept", "source": "https://github.com/isaacs/node-tar/security/advisories/GHSA-gvwx-54wh-qm9j", "content": "", "creation_timestamp": "2026-07-20T22:35:12.016479Z"}, {"uuid": "40b83494-b8f4-4cfd-a646-ab55a0ad34be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59870", "type": "published-proof-of-concept", "source": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-724g-mxrg-4qvm", "content": "", "creation_timestamp": "2026-07-20T22:37:30.900964Z"}, {"uuid": "8b326240-9248-40aa-a2a9-2847abdcbf50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59873", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmn4h2325", "content": "\n\ud83d\udea8 New CRITICAL CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-59873 impacts tar in 3 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/627\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-22T12:01:11.223923Z"}, {"uuid": "86c23190-1b17-4e07-bb75-24df70196583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59874", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmoufus24", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-59874 impacts tar in 3 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/628\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-22T12:01:13.388267Z"}, {"uuid": "94626ca3-b71a-480b-a6fd-75e136efb352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59871", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmqeztj2n", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-59871 impacts tar in 3 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/629\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-22T12:01:14.692819Z"}, {"uuid": "e3a1c558-8379-44a8-b55e-548dbca89560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59875", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmsdhlk24", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-59875 impacts tar in 3 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/630\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-22T12:01:16.579228Z"}]}