TI-2026-25499 CVE-2026-33056 · GHSA-j4xf-2g29-59ph
tar-rs: unpack_in can chmod arbitrary directories by following symlinks
Priority LOW 23
tar-rs is a tar archive reading/writing library for Rust.
Vulnerabilities
5 records
TI-2021-16111 CVE-2021-38511 · GHSA-62jx-8vmh-4mcw
An issue was discovered in the tar crate before 0.4.36 for Rust.
Priority LOW 36
An issue was discovered in the tar crate before 0.4.36 for Rust.
TI-2021-12469 CVE-2021-32804 · GHSA-3jfq-g458-7qm9
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
Priority MEDIUM 51
The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization.
TI-2021-12468 CVE-2021-32803 · GHSA-r628-mhmh-qjhw
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
Priority MEDIUM 46
The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection.
TI-2018-14952 CVE-2018-20990 · GHSA-2367-c296-3mp2
An issue was discovered in the tar crate before 0.4.16 for Rust.
Priority LOW 36
An issue was discovered in the tar crate before 0.4.16 for Rust.