astral-sh/tokio-tar Security Advisories | GitStock

medium2026-05-29

astral-tokio-tar has a PAX Header Desynchronization issue

GHSA-3cv2-h65g-fgmm

low2026-05-06

astral-tokio-tar: `unpack_in` can chmod arbitrary directories by following symlinks

GHSA-xx64-wwv2-hcqq

medium2026-05-06

astral-tokio-tar is Vulnerable to PAX Header Desynchronization

GHSA-fp55-jw48-c537

medium2026-03-17

astral-tokio-tar insufficiently validates PAX extensions during extraction

GHSA-6gx3-4362-rf54 · CVE-2026-32766

high2025-10-21

astral-tokio-tar Vulnerable to PAX Header Desynchronization

GHSA-j5gw-2vrg-8fgx · CVE-2025-62518

medium2025-09-23

astral-tokio-tar has a path traversal in tar extraction

GHSA-3wgq-wrwc-vqmv · CVE-2025-59825