Login Request a demo
AR
Product
Archive::tar
by Archive::tar Project · last CVE May 26, 2026
5
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 3Medium 0Low 0
Severity
All severities5Critical1High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Archive::tar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42496
9.1
1%
May 26
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory
Affected: before 3.08
CVE-2026-9538
7.5
1%
May 26
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header
Affected: before 3.10
CVE-2026-42497
7.5
0%
May 26
Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory
Affected: before 3.08
CVE-2018-12015
7.5
7%
Jun 7
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file…
Affected: through 2.28
CVE-2007-4829
–
4%
Nov 2
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that…
Affected: through 1.36
Showing 5