CVE-2026-59871
CVE Details
Visit the official vulnerability details page for CVE-2026-59871 to learn more.
Initial Publication
07/08/2026
Last Update
07/10/2026
Third Party Dependency
tar
NIST CVE Summary
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScript numbers, causing downstream path handling such as normalizeWindowsPath(entry.path).split('/') to throw an uncaught TypeError. This issue is fixed in version 7.5.18.
CVE Severity
Our Official Summary
Investigation is ongoing to determine how this vulnerability affects our products.
Status
Analyzed
Affected Products & Versions
| Version | PaletteAI | PaletteAI VerteX |
|---|---|---|
| 1.2.0 | ⚠️ Impacted | ⚠️ Impacted |
Revision History
No revisions available.