Skip to content
OpenAdvisories

Package · Debian

rust-async-tar

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-53600

    async-tar PAX extension-header desync enables tar entry/content smuggling

    async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header (a GNU longname L, a GNU longlink K, or a PAX x/g header) instead of to the next…

    dignifiedquire async-tar rust-async-tar async-tar Debian Ubuntu crates.io