Lucene search
+L

1 matches found

RustSec
RustSec
added 2026/03/17 12:0 p.m.11 views

Insufficient validation of PAX extensions during extraction

In versions 0.5.6 and earlier of astral-tokio-tar, malformed PAX extensions were silently skipped when parsing tar archives. This silent skipping rather than rejection of invalid PAX extensions could be used as a building block for a parser differential, for example by silently skipping a malform...

6.3CVSS5.7AI score0.00249EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder