tar-rs vulnerabilities

1 known vulnerability in tar-rs from Alexcrichton. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  tar-rs: Access of Resource Using Incompatible Type

  CVE-2026-33055Mar 20, 2026Alexcrichton

  tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size header in cases where the base header size is nonzero. As part of CVE-2025-62518, the astral-tokio-tar project was changed to cor