Skip to main content
cve.nowby Sazabi
← Go
GoPackage

archive/tar

3 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 medium
Registry
pkg.go.dev

Advisories 3

  • CVE-2026-32288Medium 5.5

    Unbounded allocation for old GNU sparse in archive/tar

    Affected: fixed in 1.25.9; from 1.26.0-0, fixed in 1.26.2.

  • CVE-2025-58183Medium 4.3

    Unbounded allocation when parsing GNU sparse map in archive/tar

    Affected: fixed in 1.24.8; from 1.25.0, fixed in 1.25.2.

  • Unbounded memory consumption when reading headers in archive/tar

    Affected: fixed in 1.18.7; from 1.19.0-0, fixed in 1.19.2.