All products

tar

Rust / Cargo · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
tar has a PAX header desynchronization issueGHSA-3PV8-6F4R-FFG2 tar Rust / Cargo Medium Fix reported
tar-rs incorrectly ignores PAX size headers if header size is nonzeroCVE-2026-33055 · GHSA-GCHP-Q4R4-X4FFVersion ranges need review. tar Rust / Cargo Medium Fix reported
tar-rs `unpack_in` can chmod arbitrary directories by following symlinksCVE-2026-33056 · GHSA-J4XF-2G29-59PHVersion ranges need review. tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 Rust / CargoRed Hat Medium Fix reported
Links in archive can create arbitrary directoriesCVE-2021-38511 · GHSA-62JX-8VMH-4MCWVersion ranges need review. tar Rust / Cargo High Fix reported
Arbitrary file overwrite in tar-rsCVE-2018-20990 · GHSA-2367-C296-3MP2Version ranges need review. tar Rust / Cargo High Fix reported