Skip to content
OpenAdvisories

Package · Wolfi

pixi-compat

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2025-62518 Public exploit

    astral-tokio-tar Vulnerable to PAX Header Desynchronization

    astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar hea…

    astral-sh tokio-tar wash pixi Debian Ubuntu Wolfi crates.io