CyberSecBulletin

Alexcrichton vulnerabilities

We track 1 vulnerability in Alexcrichton products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2026.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest Alexcrichton vulnerabilities

  • 8.1 High severity

    tar-rs: Access of Resource Using Incompatible Type

    CVE-2026-33055Alexcrichton

    tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size header in cases where the base header size is nonzero. As part of CVE-2025-62518, the astral-tokio-tar project was changed to cor