alexcrichton

Products

ProductCVEsExploitedLatest
tar-rs2–Mar 20, 2026

Exploited and recent CVEs

  • CVE-2026-33056 Medium 5.1 tar-rs: unpack_in can chmod arbitrary directories by following symlinks 0.4%
  • CVE-2026-33055 Medium 5.1 tar-rs incorrectly ignores PAX size headers if header size is nonzero 0.4%