Login Request a demo
TA
Product
Tar
by Tar Project · last CVE Mar 20, 2026
5
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 4Medium 1Low 0
Severity
All severities5Critical0High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-32804
8.1
15%
Aug 3
The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path…
Affected: before 3.2.2; 4.0.0 before 4.4.14; 5.0.0 before 5.0.6; 6.0.0 before 6.1.1
CVE-2021-32803
8.1
8%
Aug 3
The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection
Affected: before 3.2.3; 4.0.0 before 4.4.15; 5.0.0 before 5.0.7; 6.0.0 before 6.1.2
CVE-2021-38511
7.5
1%
Aug 10
An issue was discovered in the tar crate before 0.4.36 for Rust
Affected: before 0.4.36
CVE-2018-20990
7.5
2%
Aug 26
An issue was discovered in the tar crate before 0.4.16 for Rust
Affected: before 0.4.16
CVE-2026-33056
6.5
0%
Mar 20
tar-rs: unpack_in can chmod arbitrary directories by following symlinks
Affected: before 0.4.45
Showing 5