Composefs

1 CVE in 1 Composefs product, including Tar-Rs. Newest: CVE-2026-70622 (2026-08-10). Severity, EPSS and public exploits for each.

Composefs products with known CVEs

ProductCVEs
Tar-Rs1
Composefs CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-70622Medium6.52026-08-10tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::append_dir_all() function that allows attackers to read files outs…