Skip to content
OpenAdvisories

Vendor

composefs

1 known vulnerabilities.

Products

tar-rs 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-70622

    tar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all()

    tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::append_dir_all() function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. Whe…

    composefs tar-rs rust-tar rust-tar Debian Ubuntu