astral-tokio-tar vulnerabilities
CVEs whose affected-version data names the astral-tokio-tar package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
RUSTSEC-2026-0145NonePAX Header Desynchronization in astral-tokio-tar
PAX Header Desynchronization in astral-tokio-tar
▾ Sunlitastral-tokio-tar · astral-tokio-tarvia OSV
RUSTSEC-2026-0113None`unpack_in` can chmod arbitrary directories by following symlinks
`unpack_in` can chmod arbitrary directories by following symlinks
▾ Sunlitastral-tokio-tar · astral-tokio-tarvia OSV
RUSTSEC-2026-0112NonePAX Header Desynchronization in astral-tokio-tar
PAX Header Desynchronization in astral-tokio-tar
▾ Sunlitastral-tokio-tar · astral-tokio-tarvia OSV
CVE-2025-62518High· 8.1PoCastral-tokio-tar is a tar archive reading/writing library for async Rust
astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inco…
▾ Midnightastral-tokio-tar · astral-tokio-tarEPSS 0.70%via NVD