GHSA-r292-9mhp-454mPublished
node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-73566 · Microsoft / collected KEV context
cve-program · CVE-2026-73566
- https://github.com/isaacs/node-tar/security/advisories/GHSA-r292-9mhp-454m
- https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a
nvd · CVE-2026-73566
- https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a
- https://github.com/isaacs/node-tar/security/advisories/GHSA-r292-9mhp-454m
osv · GHSA-r292-9mhp-454m
Related operational evidence
Explicit CVE identifiers- Jira Software Data Center: DoS (Denial of Service) node-tar dependency tar Dependency (CVE-2026-73566) · Security advisory · 15 Sep 2026