Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

tar

4 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 medium
Registry
crates.io

Advisories 4

  • CVE-2026-33056Medium 5.1

    tar-rs: unpack_in can chmod arbitrary directories by following symlinks

    Affected: fixed in 0.4.45; fixed in 0.4.45.

  • CVE-2026-33055Medium 5.1

    tar-rs incorrectly ignores PAX size headers if header size is nonzero

    Affected: fixed in 0.4.45; fixed in 0.4.45.

  • An issue was discovered in the tar crate before 0.4.36 for Rust.

    Affected: fixed in 0.4.36; fixed in 0.4.36.

  • An issue was discovered in the tar crate before 0.4.16 for Rust.

    Affected: fixed in 0.4.16; fixed in 0.4.16.