async-tar vulnerabilities

CVEs whose affected-version data names the async-tar package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-53600Medium

3w ago

async-tar is a tar archive reading/writing library for async Rust

async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header (a GNU longname L, a GNU longlink K, or a PAX x/g header) …

▾ Sunlitasync-tar · async-tarEPSS 0.32%via NVD