Archive-Extraction

npm `tar` Package Unicode-Normalization Race Condition / File Collision (CVE-2026-2395) newCVE-2026-2395miscMEDIUMUnverified2026-07-05Node.js `tar` Package Symlink Path Traversal — CVE-2026-29786 newCVE-2026-29786miscHIGHPatched2026-07-05Docker cp Copy-Out Destination Escape via Symlink Race newNone assigned as of 2026-07-03cloudMEDIUMUnverified2026-07-037-Zip RAR5 Mark-of-the-Web / ADS Full-Chain Bypass newNone assigned as of 2026-07-03miscHIGHUnverified2026-07-03LiteSpeed User-End cPanel Plugin Local Privilege Escalation (CVE-2026-48172) new KEV EPSS 19%CVE-2026-48172webHIGHUnverified2026-05-30