Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

astral-tokio-tar

4 known vulnerabilities (1 high, 1 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 high, 1 medium, 1 low
Registry
crates.io

Advisories 4

  • `astral-tokio-tar` is unmaintained

    Affected: all versions.

  • astral-tokio-tar insufficiently validates PAX extensions during extraction

    Affected: fixed in 0.6.0; fixed in 0.6.0.

  • astral-tokio-tar Vulnerable to PAX Header Desynchronization

    Affected: fixed in 0.5.6; fixed in 0.5.6.

  • CVE-2025-59825Medium 6.1

    astral-tokio-tar has a path traversal in tar extraction

    Affected: fixed in 0.5.4.