BINGOS Archive::Tar

• CVE-2026-9538 High 7.5 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header 0.5%
• CVE-2026-42497 High 7.5 Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory 0.5%
• CVE-2026-42496 Critical 9.1 Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory 0.5%