pkg:Debian/rust-astral-tokio-tar
3 total CVEsHIGH1MEDIUM1
✅ Check your installed version
All known vulnerabilities
HIGH8.1CVE-2025-62518`tokio-tar` parses PAX extended headers incorrectly, allows file smuggling from 0
MEDIUM5.3CVE-2026-32766Insufficient validation of PAX extensions during extraction from 0
—CVE-2025-59825astral-tokio-tar has a path traversal in tar extraction from 0