CVE-2026-59873
Fixed in a distro release EPSS <1%CVSS 9.2
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, allowing a small crafted gzip bomb to exhaust disk space and CPU. This issue is fixed in version 7.5.19.
Products: isaacs node-tar
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | tar | 7.5.19 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | nodejs | 1:22.23.1-4.el10_2 |
| AlmaLinux 10 | nodejs-devel | 1:22.23.1-4.el10_2 |
| AlmaLinux 10 | nodejs-docs | 1:22.23.1-4.el10_2 |
| AlmaLinux 10 | nodejs-full-i18n | 1:22.23.1-4.el10_2 |
| AlmaLinux 10 | nodejs-libs | 1:22.23.1-4.el10_2 |
| AlmaLinux 10 | nodejs-npm | 1:10.9.8-1.22.23.1.4.el10_2 |
| AlmaLinux 10 | nodejs24 | 1:24.18.0-3.el10_2 |
| AlmaLinux 10 | nodejs24-devel | 1:24.18.0-3.el10_2 |
| AlmaLinux 10 | nodejs24-docs | 1:24.18.0-3.el10_2 |
| AlmaLinux 10 | nodejs24-full-i18n | 1:24.18.0-3.el10_2 |
| AlmaLinux 10 | nodejs24-libs | 1:24.18.0-3.el10_2 |
| AlmaLinux 10 | nodejs24-npm | 1:11.16.0-1.24.18.0.3.el10_2 |
| AlmaLinux 8 | nodejs | 1:22.23.1-2.module_el8.10.0+4236+04bc75d9 |
| AlmaLinux 8 | nodejs | 1:24.18.0-2.module_el8.10.0+4237+cde4efc3 |
| AlmaLinux 8 | nodejs-devel | 1:24.18.0-2.module_el8.10.0+4237+cde4efc3 |
| AlmaLinux 8 | nodejs-devel | 1:22.23.1-2.module_el8.10.0+4236+04bc75d9 |
| AlmaLinux 8 | nodejs-docs | 1:24.18.0-2.module_el8.10.0+4237+cde4efc3 |
| AlmaLinux 8 | nodejs-docs | 1:22.23.1-2.module_el8.10.0+4236+04bc75d9 |
| AlmaLinux 8 | nodejs-full-i18n | 1:24.18.0-2.module_el8.10.0+4237+cde4efc3 |
| AlmaLinux 8 | nodejs-full-i18n | 1:22.23.1-2.module_el8.10.0+4236+04bc75d9 |
| AlmaLinux 8 | nodejs-libs | 1:24.18.0-2.module_el8.10.0+4237+cde4efc3 |
| AlmaLinux 8 | nodejs-libs | 1:22.23.1-2.module_el8.10.0+4236+04bc75d9 |
| AlmaLinux 8 | nodejs-nodemon | 3.1.14-1.module_el8.10.0+4237+cde4efc3 |
| AlmaLinux 8 | nodejs-nodemon | 3.1.14-1.module_el8.10.0+4236+04bc75d9 |
| AlmaLinux 8 | nodejs-packaging | 2021.06-6.module_el8.10.0+4158+e796f37f |
| AlmaLinux 8 | nodejs-packaging | 2021.06-6.module_el8.10.0+4086+70facd4a |
| AlmaLinux 8 | nodejs-packaging-bundler | 2021.06-6.module_el8.10.0+4086+70facd4a |
| AlmaLinux 8 | nodejs-packaging-bundler | 2021.06-6.module_el8.10.0+4158+e796f37f |
| AlmaLinux 8 | npm | 1:10.9.8-1.22.23.1.2.module_el8.10.0+4236+04bc75d9 |
| AlmaLinux 8 | npm | 1:11.16.0-1.24.18.0.2.module_el8.10.0+4237+cde4efc3 |
| AlmaLinux 8 | v8-12.4-devel | 3:12.4.254.21-1.22.23.1.2.module_el8.10.0+4236+04bc75d9 |
| AlmaLinux 8 | v8-13.6-devel | 3:13.6.233.17-1.24.18.0.2.module_el8.10.0+4237+cde4efc3 |
| AlmaLinux 9 | nodejs | 1:24.18.0-3.module_el9.8.0+286+9023ffdb |
| AlmaLinux 9 | nodejs | 1:22.23.1-2.module_el9.8.0+285+5c3b0251 |
| AlmaLinux 9 | nodejs-devel | 1:22.23.1-2.module_el9.8.0+285+5c3b0251 |
| AlmaLinux 9 | nodejs-devel | 1:24.18.0-3.module_el9.8.0+286+9023ffdb |
| AlmaLinux 9 | nodejs-docs | 1:24.18.0-3.module_el9.8.0+286+9023ffdb |
| AlmaLinux 9 | nodejs-docs | 1:22.23.1-2.module_el9.8.0+285+5c3b0251 |
| AlmaLinux 9 | nodejs-full-i18n | 1:22.23.1-2.module_el9.8.0+285+5c3b0251 |
| AlmaLinux 9 | nodejs-full-i18n | 1:24.18.0-3.module_el9.8.0+286+9023ffdb |
| AlmaLinux 9 | nodejs-libs | 1:22.23.1-2.module_el9.8.0+285+5c3b0251 |
| AlmaLinux 9 | nodejs-libs | 1:24.18.0-3.module_el9.8.0+286+9023ffdb |
| AlmaLinux 9 | nodejs-nodemon | 3.1.14-1.module_el9.8.0+285+5c3b0251 |
| AlmaLinux 9 | nodejs-nodemon | 3.1.14-2.module_el9.8.0+286+9023ffdb |
| AlmaLinux 9 | nodejs-packaging | 2021.06-6.module_el9.7.0+227+12323393 |
| AlmaLinux 9 | nodejs-packaging | 2021.06-6.module_el9.7.0+209+ecf6523e |
| AlmaLinux 9 | nodejs-packaging-bundler | 2021.06-6.module_el9.7.0+227+12323393 |
| AlmaLinux 9 | nodejs-packaging-bundler | 2021.06-6.module_el9.7.0+209+ecf6523e |
| AlmaLinux 9 | npm | 1:11.16.0-1.24.18.0.3.module_el9.8.0+286+9023ffdb |
| AlmaLinux 9 | npm | 1:10.9.8-1.22.23.1.2.module_el9.8.0+285+5c3b0251 |
| AlmaLinux 9 | v8-12.4-devel | 3:12.4.254.21-1.22.23.1.2.module_el9.8.0+285+5c3b0251 |
| AlmaLinux 9 | v8-13.6-devel | 3:13.6.233.17-1.24.18.0.3.module_el9.8.0+286+9023ffdb |
| Chainguard | actions-runner | 2.336.0-r1 |
| Chainguard | code-server | 4.129.0-r1 |
| Chainguard | gitlab-rails-ce-18.1 | 18.1.6-r31 |
| Chainguard | gitlab-rails-ce-18.10 | no fix |
| Chainguard | gitlab-rails-ce-18.6 | no fix |
| Chainguard | gitlab-rails-ce-18.7 | no fix |
| Chainguard | gitlab-rails-ce-18.8 | no fix |
| Chainguard | gitlab-rails-ce-18.9 | no fix |
| Chainguard | gitlab-rails-ce-19.0 | 19.0.4-r10 |
| Chainguard | gitlab-rails-ce-19.1 | 19.1.2-r8 |
| Chainguard | gitlab-rails-ce-19.2 | 19.2.2-r2 |
| Chainguard | gitlab-rails-ce-fips-18.1 | 18.1.6-r61 |
| Chainguard | gitlab-rails-ce-fips-18.10 | 18.10.8-r8 |
| Chainguard | gitlab-rails-ce-fips-18.11 | 18.11.12-r2 |
| Chainguard | gitlab-rails-ce-fips-18.6 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.7 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.8 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.9 | 18.9.8-r8 |
| Chainguard | gitlab-rails-ce-fips-19.0 | 19.0.4-r7 |
| Chainguard | gitlab-rails-ce-fips-19.1 | 19.1.2-r9 |
| Chainguard | gitlab-rails-ce-fips-19.2 | 19.2.1-r4 |
| Chainguard | graalvm-25-ce-nodejs | 25.0.4-r2 |
| Chainguard | homepage | 1.13.2-r5 |
| Chainguard | jupyter-base-notebook | 7.6.3-r2 |
| Chainguard | kibana-9.0 | 9.0.8-r34 |
| Chainguard | kibana-9.0-bitnami | 9.0.8-r34 |
| Chainguard | kibana-9.0-iamguarded | 9.0.8-r34 |
| Chainguard | kibana-9.2 | 9.2.8-r17 |
| Chainguard | kibana-9.2-iamguarded | 9.2.8-r17 |
| Chainguard | kubeflow-centraldashboard | 1.10.0-r25 |
| Chainguard | lerna | 9.0.7-r11 |
| Chainguard | npm | 12.0.0-r1 |
| Chainguard | opensearch-dashboards-2 | 2.19.6-r4 |
| Chainguard | opensearch-dashboards-2-fips | 2.19.5-r18 |
| Chainguard | pnpm-stage0 | no fix |
| Chainguard | prism | 5.16.0-r1 |
| Chainguard | pulumi-language-nodejs | 3.253.0-r2 |
| Chainguard | saf | 1.6.0-r3 |
| Chainguard | sqlpad | 7.5.7-r29 |
| Chainguard | tensorflow-gpu-jupyter | 2.21.0-r12 |
| Chainguard | wazuh-dashboard | 4.14.6-r6 |
| Chainguard | wazuh-dashboard-fips | 4.14.6-r4 |
| Debian 12 | node-tar | no fix |
| Debian 13 | node-tar | no fix |
| Debian 14 | node-tar | 7.5.19+~4.0.1-1 |
| Red Hat Enterprise Linux 10.2 | nodejs | 1:22.23.1-4.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs-debuginfo | 1:22.23.1-4.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs-devel | 1:22.23.1-4.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs-docs | 1:22.23.1-4.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs-full-i18n | 1:22.23.1-4.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs-libs | 1:22.23.1-4.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs-libs-debuginfo | 1:22.23.1-4.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs-npm | 1:10.9.8-1.22.23.1.4.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs22 | 1:22.23.1-4.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs22-debuginfo | 1:22.23.1-4.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs22-debugsource | 1:22.23.1-4.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24 | 1:24.18.0-3.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-debuginfo | 1:24.18.0-3.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-debugsource | 1:24.18.0-3.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-devel | 1:24.18.0-3.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-docs | 1:24.18.0-3.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-full-i18n | 1:24.18.0-3.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-libs | 1:24.18.0-3.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-libs-debuginfo | 1:24.18.0-3.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-npm | 1:11.16.0-1.24.18.0.3.el10_2 |
| Red Hat Enterprise Linux 10.2 | rh-podman-desktop | 0:1.1.2-1.el10_2 |
| Red Hat Enterprise Linux 8 | nodejs | 1:24.18.0-2.module+el8.10.0+24562+090c6525 |
| Red Hat Enterprise Linux 8 | nodejs | 1:22.23.1-2.module+el8.10.0+24556+e9352af2 |
| Red Hat Enterprise Linux 8 | nodejs-debuginfo | 1:22.23.1-2.module+el8.10.0+24556+e9352af2 |
| Red Hat Enterprise Linux 8 | nodejs-debuginfo | 1:24.18.0-2.module+el8.10.0+24562+090c6525 |
| Red Hat Enterprise Linux 8 | nodejs-debugsource | 1:22.23.1-2.module+el8.10.0+24556+e9352af2 |
| Red Hat Enterprise Linux 8 | nodejs-debugsource | 1:24.18.0-2.module+el8.10.0+24562+090c6525 |
| Red Hat Enterprise Linux 8 | nodejs-devel | 1:22.23.1-2.module+el8.10.0+24556+e9352af2 |
| Red Hat Enterprise Linux 8 | nodejs-devel | 1:24.18.0-2.module+el8.10.0+24562+090c6525 |
| Red Hat Enterprise Linux 8 | nodejs-docs | 1:24.18.0-2.module+el8.10.0+24562+090c6525 |
| Red Hat Enterprise Linux 8 | nodejs-docs | 1:22.23.1-2.module+el8.10.0+24556+e9352af2 |
| Red Hat Enterprise Linux 8 | nodejs-full-i18n | 1:22.23.1-2.module+el8.10.0+24556+e9352af2 |
| Red Hat Enterprise Linux 8 | nodejs-full-i18n | 1:24.18.0-2.module+el8.10.0+24562+090c6525 |
| Red Hat Enterprise Linux 8 | nodejs-libs | 1:24.18.0-2.module+el8.10.0+24562+090c6525 |
| Red Hat Enterprise Linux 8 | nodejs-libs | 1:22.23.1-2.module+el8.10.0+24556+e9352af2 |
| Red Hat Enterprise Linux 8 | nodejs-libs-debuginfo | 1:22.23.1-2.module+el8.10.0+24556+e9352af2 |
| Red Hat Enterprise Linux 8 | nodejs-libs-debuginfo | 1:24.18.0-2.module+el8.10.0+24562+090c6525 |
| Red Hat Enterprise Linux 8 | nodejs-nodemon | 0:3.1.14-1.module+el8.10.0+24556+e9352af2 |
| Red Hat Enterprise Linux 8 | nodejs-nodemon | 0:3.1.14-1.module+el8.10.0+24562+090c6525 |
| Red Hat Enterprise Linux 8 | nodejs-packaging | 0:2021.06-6.module+el8.10.0+24562+090c6525 |
| Red Hat Enterprise Linux 8 | nodejs-packaging | 0:2021.06-6.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | nodejs-packaging-bundler | 0:2021.06-6.module+el8.10.0+24562+090c6525 |
| Red Hat Enterprise Linux 8 | nodejs-packaging-bundler | 0:2021.06-6.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | npm | 1:10.9.8-1.22.23.1.2.module+el8.10.0+24556+e9352af2 |
| Red Hat Enterprise Linux 8 | npm | 1:11.16.0-1.24.18.0.2.module+el8.10.0+24562+090c6525 |
| Red Hat Enterprise Linux 8 | v8-12.4-devel | 3:12.4.254.21-1.22.23.1.2.module+el8.10.0+24556+e9352af2 |
| Red Hat Enterprise Linux 8 | v8-13.6-devel | 3:13.6.233.17-1.24.18.0.2.module+el8.10.0+24562+090c6525 |
| Red Hat Enterprise Linux 9 | nodejs | 1:22.23.1-2.module+el9.8.0+24538+3f176d52 |
| Red Hat Enterprise Linux 9 | nodejs | 1:24.18.0-3.module+el9.8.0+24537+83ec84e1 |
| Red Hat Enterprise Linux 9 | nodejs-debuginfo | 1:22.23.1-2.module+el9.8.0+24538+3f176d52 |
| Red Hat Enterprise Linux 9 | nodejs-debuginfo | 1:24.18.0-3.module+el9.8.0+24537+83ec84e1 |
| Red Hat Enterprise Linux 9 | nodejs-debugsource | 1:24.18.0-3.module+el9.8.0+24537+83ec84e1 |
| Red Hat Enterprise Linux 9 | nodejs-debugsource | 1:22.23.1-2.module+el9.8.0+24538+3f176d52 |
| Red Hat Enterprise Linux 9 | nodejs-devel | 1:24.18.0-3.module+el9.8.0+24537+83ec84e1 |
| Red Hat Enterprise Linux 9 | nodejs-devel | 1:22.23.1-2.module+el9.8.0+24538+3f176d52 |
| Red Hat Enterprise Linux 9 | nodejs-docs | 1:22.23.1-2.module+el9.8.0+24538+3f176d52 |
| Red Hat Enterprise Linux 9 | nodejs-docs | 1:24.18.0-3.module+el9.8.0+24537+83ec84e1 |
| Red Hat Enterprise Linux 9 | nodejs-full-i18n | 1:22.23.1-2.module+el9.8.0+24538+3f176d52 |
| Red Hat Enterprise Linux 9 | nodejs-full-i18n | 1:24.18.0-3.module+el9.8.0+24537+83ec84e1 |
| Red Hat Enterprise Linux 9 | nodejs-libs | 1:22.23.1-2.module+el9.8.0+24538+3f176d52 |
| Red Hat Enterprise Linux 9 | nodejs-libs | 1:24.18.0-3.module+el9.8.0+24537+83ec84e1 |
| Red Hat Enterprise Linux 9 | nodejs-libs-debuginfo | 1:24.18.0-3.module+el9.8.0+24537+83ec84e1 |
| Red Hat Enterprise Linux 9 | nodejs-libs-debuginfo | 1:22.23.1-2.module+el9.8.0+24538+3f176d52 |
| Red Hat Enterprise Linux 9 | nodejs-nodemon | 0:3.1.14-1.module+el9.8.0+24540+c30b2ffe |
| Red Hat Enterprise Linux 9 | nodejs-nodemon | 0:3.1.14-2.module+el9.8.0+24539+0ea88729 |
| Red Hat Enterprise Linux 9 | nodejs-packaging | 0:2021.06-6.module+el9.8.0+24355+35d95b59 |
| Red Hat Enterprise Linux 9 | nodejs-packaging | 0:2021.06-6.module+el9.8.0+24156+bb41d456 |
| Red Hat Enterprise Linux 9 | nodejs-packaging-bundler | 0:2021.06-6.module+el9.8.0+24355+35d95b59 |
| Red Hat Enterprise Linux 9 | nodejs-packaging-bundler | 0:2021.06-6.module+el9.8.0+24156+bb41d456 |
| Red Hat Enterprise Linux 9 | npm | 1:10.9.8-1.22.23.1.2.module+el9.8.0+24538+3f176d52 |
| Red Hat Enterprise Linux 9 | npm | 1:11.16.0-1.24.18.0.3.module+el9.8.0+24537+83ec84e1 |
| Red Hat Enterprise Linux 9 | v8-12.4-devel | 3:12.4.254.21-1.22.23.1.2.module+el9.8.0+24538+3f176d52 |
| Red Hat Enterprise Linux 9 | v8-13.6-devel | 3:13.6.233.17-1.24.18.0.3.module+el9.8.0+24537+83ec84e1 |
| Red Hat Enterprise Linux eus 10.0 | nodejs | 1:22.23.1-3.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | nodejs-debuginfo | 1:22.23.1-3.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | nodejs-devel | 1:22.23.1-3.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | nodejs-docs | 1:22.23.1-3.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | nodejs-full-i18n | 1:22.23.1-3.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | nodejs-libs | 1:22.23.1-3.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | nodejs-libs-debuginfo | 1:22.23.1-3.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | nodejs-npm | 1:10.9.8-1.22.23.1.3.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | nodejs22 | 1:22.23.1-3.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | nodejs22-debuginfo | 1:22.23.1-3.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | nodejs22-debugsource | 1:22.23.1-3.el10_0 |
| Red Hat rhel eus 9.6 | nodejs | 1:22.23.1-2.module+el9.6.0+24604+449f851b |
| Red Hat rhel eus 9.6 | nodejs-debuginfo | 1:22.23.1-2.module+el9.6.0+24604+449f851b |
| Red Hat rhel eus 9.6 | nodejs-debugsource | 1:22.23.1-2.module+el9.6.0+24604+449f851b |
| Red Hat rhel eus 9.6 | nodejs-devel | 1:22.23.1-2.module+el9.6.0+24604+449f851b |
| Red Hat rhel eus 9.6 | nodejs-docs | 1:22.23.1-2.module+el9.6.0+24604+449f851b |
| Red Hat rhel eus 9.6 | nodejs-full-i18n | 1:22.23.1-2.module+el9.6.0+24604+449f851b |
| Red Hat rhel eus 9.6 | nodejs-libs | 1:22.23.1-2.module+el9.6.0+24604+449f851b |
| Red Hat rhel eus 9.6 | nodejs-libs-debuginfo | 1:22.23.1-2.module+el9.6.0+24604+449f851b |
| Red Hat rhel eus 9.6 | nodejs-nodemon | 0:3.1.14-1.module+el9.6.0+24604+449f851b |
| Red Hat rhel eus 9.6 | nodejs-packaging | 0:2021.06-4.module+el9.6.0+23473+45664c2d |
| Red Hat rhel eus 9.6 | nodejs-packaging-bundler | 0:2021.06-4.module+el9.6.0+23473+45664c2d |
| Red Hat rhel eus 9.6 | npm | 1:10.9.8-1.22.23.1.2.module+el9.6.0+24604+449f851b |
| Red Hat rhel eus 9.6 | v8-12.4-devel | 3:12.4.254.21-1.22.23.1.2.module+el9.6.0+24604+449f851b |
| Rocky Linux 10 | nodejs22 | 1:22.23.1-4.el10_2 |
| Rocky Linux 10 | nodejs24 | 1:24.18.0-3.el10_2 |
| Rocky Linux 8 | nodejs-packaging | 0:2021.06-6.module+el8.10.0+40048+6d99f608 |
| Rocky Linux 8 | nodejs-packaging | 0:2021.06-6.module+el8.10.0+40172+38f6fdd1 |
| Rocky Linux 8 | nodejs-packaging | 0:2021.06-6.module+el8.10.0+40171+8fa9c325 |
| Rocky Linux 9 | nodejs | 1:22.23.1-2.module+el9.8.0+40263+faa47049 |
| Rocky Linux 9 | nodejs | 1:24.18.0-3.module+el9.8.0+40264+d9b257bb |
| Rocky Linux 9 | nodejs-nodemon | 0:3.1.14-1.module+el9.8.0+40263+faa47049 |
| Rocky Linux 9 | nodejs-nodemon | 0:3.1.14-2.module+el9.8.0+40264+d9b257bb |
| Rocky Linux 9 | nodejs-packaging | 0:2021.06-6.module+el9.7.0+40153+4d595597 |
| Rocky Linux 9 | nodejs-packaging | 0:2021.06-6.module+el9.7.0+40165+d075e3f2 |
| Rocky Linux 9 | nodejs-packaging | 0:2021.06-6.module+el9.8.0+40164+8921ab53 |
| Rocky Linux 9 | nodejs-packaging | 0:2021.06-6.module+el9.7.0+40052+e32ea525 |
| Ubuntu 18.04 LTS | node-tar | no fix |
| Ubuntu 22.04 LTS | node-tar | no fix |
| Ubuntu 24.04 LTS | node-tar | no fix |
| Ubuntu 25.10 | node-tar | no fix |
| Ubuntu 26.04 LTS | node-tar | no fix |
| Ubuntu 26.10 | node-tar | no fix |
| Ubuntu Pro 14.04 LTS | node-tar | no fix |
| Ubuntu Pro 16.04 LTS | node-tar | no fix |
| Ubuntu Pro 20.04 LTS | node-tar | no fix |
| Wolfi | code-server | 4.129.0-r1 |
| Wolfi | jupyter-base-notebook | 7.6.3-r2 |
| Wolfi | kubeflow-centraldashboard | 1.10.0-r25 |
| Wolfi | lerna | 9.0.7-r11 |
| Wolfi | npm | 12.0.0-r1 |
| Wolfi | pnpm-stage0 | no fix |
| Wolfi | prism | 5.16.0-r1 |
| Wolfi | pulumi-language-nodejs | 3.253.0-r2 |
| Wolfi | saf | 1.6.0-r3 |
| Wolfi | sqlpad | 7.5.7-r29 |