AS
Product
Astral-tokio-tar
by Astral · last CVE Mar 20, 2026
1
CVEs
0
On KEV
5.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add Astral-tokio-tar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-32766
5.3
0%
Mar 20
astral-tokio-tar insufficiently validates PAX extensions during extraction
Affected: before 0.6.0
Showing 1