CVE-2026-26960 | isaacs node-tar up to 7.5.7 Extraction path traversal

A vulnerability was found in isaacs node-tar up to 7.5.7 and classified as critical. This vulnerability affects unknown code of the component Extraction Handler. Such manipulation leads to path traversal.

This vulnerability is listed as CVE-2026-26960. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.