Lucene search
+L

10 matches found

OSV
OSV
added 2026/03/20 5:25 p.m.16 views

GHSA-GCHP-Q4R4-X4FF tar-rs incorrectly ignores PAX size headers if header size is nonzero

Summary As part of CVE-2025-62518 the astral-tokio-tar project was changed to correctly honor PAX size headers in the case where it was different from the base header. However, it was missed at the time that this project the original Rust tar crate had a conditional logic that skipped the PAX siz...

8.1CVSS5.7AI score0.00677EPSS
SaveExploits2References7
Rows per page
Query Builder