https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:04:05 +0000 https://cve.radiocsirt.org/vuln/cve-2021-38511 <p>An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction can create arbitrary directories via .. traversal.</p> <p>An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction can create arbitrary directories via .. traversal.</p> https://cve.radiocsirt.org/vuln/cve-2021-38511 https://cve.radiocsirt.org/vuln/ghsa-62jx-8vmh-4mcw <p><strong>Affected:</strong> crates.io: tar</p> <p>When unpacking a tarball that contains a symlink the tar crate may create directories outside of the directory it&#39;s supposed to unpack into. The function errors when it&#39;s trying to create a file, but the folders are already created at this point.</p> <p><strong>Affected:</strong> crates.io: tar</p> <p>When unpacking a tarball that contains a symlink the tar crate may create directories outside of the directory it&#39;s supposed to unpack into. The function errors when it&#39;s trying to create a file, but the folders are already created at this point.</p> https://cve.radiocsirt.org/vuln/ghsa-62jx-8vmh-4mcw