Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:cargo/tar@0.4.36
purl pkg:cargo/tar@0.4.36
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-88p2-xuah-2ygr Links in archive can create arbitrary directories When unpacking a tarball that contains a symlink the tar crate may create directories outside of the directory it's supposed to unpack into. The function errors when it's trying to create a file, but the folders are already created at this point. CVE-2021-38511
GHSA-62jx-8vmh-4mcw

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-02T16:58:05.024055+00:00 GHSA Importer Fixing VCID-88p2-xuah-2ygr https://github.com/advisories/GHSA-62jx-8vmh-4mcw 38.1.0