Astral-Sh Tokio-Tar
3 CVEs affecting Astral-Sh Tokio-Tar. Latest disclosed: 2026-03-20. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-62518 | High | 8.1 | 2025-10-21 | astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability… |
CVE-2026-32766 | Medium | 5.3 | 2026-03-20 | astral-tokio-tar is a tar archive reading/writing library for async Rust. In versions 0.5.6 and earlier, malformed PAX extensions were silently skipped when pa… |
CVE-2025-59825 | | 2025-09-23 | astral-tokio-tar is a tar archive reading/writing library for async Rust. In versions 0.5.3 and earlier of astral-tokio-tar, tar archives may extract outside o… |