Alexcrichton Tar-rs
2 CVEs affecting Alexcrichton Tar-rs. Latest disclosed: 2026-03-20. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-33055 | High | 8.1 | 2026-03-20 | tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size header in cases where the ba… |
CVE-2026-33056 | Medium | 6.5 | 2026-03-20 | tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's unpack_dir function uses… |