Sploitus

18 exploited vulnerabilities in Node-Tar

Vulnerabilities with publicly known exploits

Vendors
Node.Js, Alt Linux, Almalinux, Centos, Red Hat, Rocky Linux
With known exploits
18
Affected Isaacs Tar versions
< 2.2.2, 4.4.2, 7.5.19, 7.5.4, 7.5.18, 7.5.10, 7.5.7, 7.5.11, 7.5.3, 6.2.1, 7.5.8, 7.5.16
Affected Npmjs Tar versions
≤ 4.4.17, 5.0.9, 6.1.8, 4.4.16, 5.0.8, 6.1.7
Affected Tar Project Tar versions
< 3.2.2, 4.4.14, 5.0.6, 6.1.1

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2018-20834
CVSS 7.5 HIGH 2019-04-03FIX AVAILABLE
CVE-2021-37712
CVSS 8.6 HIGH 2021-08-31FIX AVAILABLE
CVE-2026-59873
CVSS 9.2 CRITICAL 2026-06-28FIX AVAILABLE
CVE-2026-23950
CVSS 8.8 HIGH 2026-01-20FIX AVAILABLE
CVE-2026-59874
CVSS 8.7 HIGH 2026-06-28FIX AVAILABLE
CVE-2026-29786 1 exploit
CVSS 8.6 HIGH 2026-03-05FIX AVAILABLE
CVE-2026-24842
CVSS 8.2 HIGH 2026-01-27FIX AVAILABLE
CVE-2026-31802 5 exploits
CVSS 8.2 HIGH 2026-01-01FIX AVAILABLE
CVE-2026-23745 1 exploit
CVSS 8.2 HIGH 2026-01-16FIX AVAILABLE
CVE-2021-37701
CVSS 8.6 HIGH 2021-08-31FIX AVAILABLE
CVE-2021-32804 1 exploit
CVSS 8.2 HIGH 2021-07-24FIX AVAILABLE
CVE-2024-28863
CVSS 6.5 MEDIUM 2024-03-21FIX AVAILABLE
CVE-2026-73566
2026-07-24FIX AVAILABLE
CVE-2026-59871
CVSS 7.5 HIGH 2026-07-08FIX AVAILABLE
CVE-2026-26960
CVSS 7.1 HIGH 2026-02-18FIX AVAILABLE
CVE-2026-53655
CVSS 6.9 MEDIUM 2026-06-15FIX AVAILABLE
CVE-2025-64118
CVSS 6.1 MEDIUM 2025-10-30FIX AVAILABLE
CVE-2026-59875
CVSS 5.3 MEDIUM 2026-07-08FIX AVAILABLE