acorn vulnerabilities (npm)

5 vulnerabilities.

• acorn npm node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records CVE-2026-59875 Fix available 5.3 MediumApril 3, 2020
• acorn npm node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling) CVE-2026-53655 Fix available 6.9 MediumApril 3, 2020
• acorn npm node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization CVE-2026-23745 Public exploitFix available 8.2 HighApril 3, 2020
• acorn npm Options structure open to XSS if passed unfiltered CVE-2021-29489 Fix available 7.6 HighApril 3, 2020
• acorn npm Regular Expression Denial of Service in Acorn CVE-2018-20801 Fix available 7.5 HighMarch 14, 2019