CVE-2026-53655

MEDIUM SEVERITY

Vulnerability Description

node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)

Published Date

June 15, 2026

Last Modified

June 15, 2026

Source

GitHub

Vendor

npm

Product

tar