astral-tokio-tar
Rust / Cargo · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| astral-tokio-tar Vulnerable to PAX Header Desynchronization | astral-tokio-tartokio-tar | Rust / CargoRed Hat | High | Fix reported | |
| astral-tokio-tar: `unpack_in` can chmod arbitrary directories by following symlinks | astral-tokio-tar | Rust / Cargo | Low | Fix reported | |
| astral-tokio-tar is Vulnerable to PAX Header Desynchronization | astral-tokio-tar | Rust / Cargo | Medium | Fix reported | |
| astral-tokio-tar has a PAX Header Desynchronization issue | astral-tokio-tar | Rust / Cargo | Medium | Fix reported | |
| astral-tokio-tar insufficiently validates PAX extensions during extraction | astral-tokio-tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 | Rust / CargoRed Hat | Medium | Fix reported | |
| astral-tokio-tar has a path traversal in tar extraction | astral-tokio-tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9 | Rust / CargoRed Hat | Medium | Fix reported |