325 matches found
CVE-2026-32766
CVE-2026-32766 affects astral-tokio-tar
Linux Distros Unpatched Vulnerability : CVE-2026-32766
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - astral-tokio-tar is a tar archive reading/writing library for async Rust. In versions 0.5.6 and earlier, malformed PAX extensions were silently skipped when...
astral-tokio-tar 安全漏洞
astral-tokio-tar is an open-source Rust library developed by Astral. Versions of astral-tokio-tar 0.5.6 and earlier contain security vulnerabilities. These vulnerabilities stem from a silent skipping of format-errors PAX extensions during the parsing of tar archives. Such behavior could potential...
Insufficient validation of PAX extensions during extraction
In versions 0.5.6 and earlier of astral-tokio-tar, malformed PAX extensions were silently skipped when parsing tar archives. This silent skipping rather than rejection of invalid PAX extensions could be used as a building block for a parser differential, for example by silently skipping a malform...
RUSTSEC-2026-0066 Insufficient validation of PAX extensions during extraction
In versions 0.5.6 and earlier of astral-tokio-tar, malformed PAX extensions were silently skipped when parsing tar archives. This silent skipping rather than rejection of invalid PAX extensions could be used as a building block for a parser differential, for example by silently skipping a malform...
PT-2026-25983
Name of the Vulnerable Software and Affected Versions astral-tokio-tar versions 0.5.6 and earlier Description astral-tokio-tar is a tar archive reading/writing library for async Rust. In versions 0.5.6 and earlier, malformed PAX extensions were silently skipped when parsing tar archives. This...
Security Bulletin: IBM Edge Data Collector uses nix-0.26.4.crate, nix-0.29.0.crate, tokio-util-0.6.10.crate, tokio-util-0.7.13.crate which is vulnerable to CVE-2021-41248.
Summary IBM Edge Data Collector uses nix-0.26.4.crate, nix-0.29.0.crate, tokio-util-0.6.10.crate, tokio-util-0.7.13.crate which is vulnerable to CVE-2021-41248. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2021-41248 DESCRIPTION: GraphiQL is the...
Bytes 安全漏洞
Bytes is a tool developed by Tokio for processing byte streams. Versions of Bytes from 1.2.1 to 1.11.1 contained security vulnerabilities. These vulnerabilities were due to integer overflows in the BytesMut::reserve function, which could lead to out-of-bounds slicing...
CVE-2026-25541
creationtimestamp| type| source ---|---|--- 2026-02-03 14:12:09+00:00| published-proof-of-concept| https://github.com/tokio-rs/bytes/security/advisories/GHSA-434x-w66g-qw3r...
Exploit for CVE-2025-62518
Tarmageddon CVE-2025-62518https://nvd.nist.gov/vuln/detail/...
openSUSE 16 Security Update : python-uv (openSUSE-SU-2026:20026-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20026-1 advisory. - CVE-2025-62518: astral-tokio-tar: Fixed boundary parsing issue allowing attackers to smuggle additional archive entries bsc1252399 -...
SUSE-SU-2026:20077-1 Security update for python-uv
This update for python-uv fixes the following issues: - CVE-2025-62518: astral-tokio-tar: Fixed boundary parsing issue allowing attackers to smuggle additional archive entries bsc1252399 - CVE-2025-58160: tracing-subscriber: Fixed log pollution bsc1249011...
[SECURITY] Fedora 41 Update: rust-reqsign-command-execute-tokio-2.0.1-1.fc41
Tokio-based command execution implementation for reqsign...
[SECURITY] Fedora 41 Update: rust-reqsign-file-read-tokio-2.0.1-1.fc41
Tokio-based file reader implementation for reqsign...
[SECURITY] Fedora 42 Update: rust-reqsign-file-read-tokio-2.0.1-1.fc42
Tokio-based file reader implementation for reqsign...
[SECURITY] Fedora 42 Update: rust-reqsign-command-execute-tokio-2.0.1-1.fc42
Tokio-based command execution implementation for reqsign...
[SECURITY] Fedora 43 Update: rust-reqsign-file-read-tokio-2.0.1-1.fc43
Tokio-based file reader implementation for reqsign...
[SECURITY] Fedora 43 Update: rust-reqsign-command-execute-tokio-2.0.1-1.fc43
Tokio-based command execution implementation for reqsign...