VYPR

async-tar

by Dignifiedquire

CVEs (1)

  • CVE-2026-53600MedSep 2, 2026
    risk 0.34cvss epss

    async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header (a GNU longname L, a GNU longlink K, or a PAX x/g header) instead of to the next file entry. POSIX…