Skip to content
OpenAdvisories

Package · Debian

rust-tar

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2021-38511

    Links in archive can create arbitrary directories

    An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction can create arbitrary directories via .. traversal.

    tar rust-tar rust-tar Debian Ubuntu crates.io