alexcrichton
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| tar-rs | 2 | – | Mar 20, 2026 |
Exploited and recent CVEs
- CVE-2026-33056 tar-rs: unpack_in can chmod arbitrary directories by following symlinks 0.4%
- CVE-2026-33055 tar-rs incorrectly ignores PAX size headers if header size is nonzero 0.4%