CVE-2026-23950 | isaacs node-tar up to 7.5.3 path-reservations System unicode encoding (GHSA-r6q2-hw4h-h46w)

January 20, 2026 Yanac

A vulnerability identified as critical has been detected in isaacs node-tar up to 7.5.3. This issue affects some unknown processing of the component path-reservations System. This manipulation causes improper handling of unicode encoding.

This vulnerability is tracked as CVE-2026-23950. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More