Login Request a demo
TO
Product
tokio-tar
by astral-sh · last CVE Mar 20, 2026
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 2Low 0
Severity
All severities3Critical0High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add tokio-tar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-59825
6.1
0%
Sep 23
astral-tokio-tar has a path traversal in tar extraction
Affected: < 0.5.4
CVE-2026-32766
5.3
0%
Mar 20
astral-tokio-tar insufficiently validates PAX extensions during extraction
Affected: < 0.6.0
Showing 2