Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/rust-tar@0.4.37-1?distro=trixie
purl pkg:deb/debian/rust-tar@0.4.37-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-88p2-xuah-2ygr Links in archive can create arbitrary directories When unpacking a tarball that contains a symlink the tar crate may create directories outside of the directory it's supposed to unpack into. The function errors when it's trying to create a file, but the folders are already created at this point. CVE-2021-38511
GHSA-62jx-8vmh-4mcw

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-03T07:52:33.088390+00:00 Debian Importer Fixing VCID-88p2-xuah-2ygr https://security-tracker.debian.org/tracker/data/json 38.1.0