Login Request a demo
TA
Product
Tar
by Gnu · last CVE Aug 3, 2026
20
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 0High 2Medium 7Low 1
Severity
All severities20Critical0High2Medium7Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-39804
6.2
0%
Mar 27
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c
Affected: before 1.35
CVE-2026-5704
5.5
0%
Apr 6
Tar: tar: hidden file injection via crafted archives
Affected: All versions, or not specified
CVE-2022-48303
5.5
1%
Jan 30
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump
Affected: through 1.34
CVE-2018-20482
4.7
1%
Dec 26
GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in…
Affected: through 1.30
CVE-2026-18477
4.4
0%
Aug 3
Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape
Affected: 1.35
CVE-2026-18508
4.4
0%
Aug 3
Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
Affected: 1.35
CVE-2025-45582
4.1
0%
Jul 11
GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process
Affected: before 1.35
Showing 7