isaacs tar

Name: isaacs tar
Brand: isaacs

productUS

cpe:2.3:a:isaacs:tar:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

critical

by severity

0critical5high5medium0low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-29786US	medium6.3	0.47% (40th)	Exploit	7.5.10	2026-03-07	< 7.5.10
CVE-2026-23745US	medium6.1	0.38% (31st)	Exploit	7.5.3	2026-01-16	< 7.5.3
CVE-2026-31802US	medium5.5	0.27% (19th)	Exploit	7.5.11	2026-03-10	< 7.5.11
CVE-2018-20834US	high7.5	3.15% (88th)	—	2.2.2	2019-04-30	2 versions
CVE-2024-28863US	—	0.93% (60th)	—	6.2.1	2024-03-21	< 6.2.1
CVE-2026-59871US	high7.5	0.64% (51st)	—	7.5.18	2026-07-08	< 7.5.18
CVE-2026-24842US	—	0.61% (49th)	—	7.5.7	2026-01-28	< 7.5.7
CVE-2026-59873US	high7.5	0.58% (48th)	—	7.5.19	2026-07-08	< 7.5.19
CVE-2026-59874US	high7.5	0.43% (38th)	—	7.5.18	2026-07-08	< 7.5.18
CVE-2026-26960US	high7.1	0.33% (26th)	—	7.5.8	2026-02-20	< 7.5.8
CVE-2026-23950US	medium5.9	0.26% (18th)	—	7.5.4	2026-01-20	< 7.5.4
CVE-2026-53655US	medium5.5	0.16% (5th)	—	7.5.16	2026-06-22	< 7.5.16

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-176Improper Handling of Unicode Encoding1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-436Interpretation Conflict1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.