Vulnerability RUSTSEC-2026-0440
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 days ago
November 03, 2026 at 12:00 PM UTC
`astral-tokio-tar` is unmaintained
0.5.0 - 0.7.1
0.5.0 - 0.7.1
Summary
`astral-tokio-tar` is unmaintained
Details
Astral ended maintenance of astral-tokio-tar on November 3, 2026. All versions of the crate are deprecated and unmaintained.
For strict tar encoding and decoding, Astral recommends tar-codec as a possible replacement.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
5 months ago
astral-tokio-tar has a PAX Header Desynchronization issue
0.5.0 - 0.6.1 GHSA-3cv2-h65g-fgmm
0.5.0 - 0.6.1 GHSA-3cv2-h65g-fgmm
Unknown
5 months ago
PAX Header Desynchronization in astral-tokio-tar
0.5.0 - 0.6.1 RUSTSEC-2026-0145
0.5.0 - 0.6.1 RUSTSEC-2026-0145
Low Risk
6 months ago
astral-tokio-tar: `unpack_in` can chmod arbitrary directories by following symlinks
0.5.0 - 0.6.1-rc1 GHSA-xx64-wwv2-hcqq
0.5.0 - 0.6.1-rc1 GHSA-xx64-wwv2-hcqq
Medium Risk
6 months ago
astral-tokio-tar is Vulnerable to PAX Header Desynchronization
0.5.0 - 0.6.1-rc1 GHSA-fp55-jw48-c537
0.5.0 - 0.6.1-rc1 GHSA-fp55-jw48-c537
Unknown
6 months ago
PAX Header Desynchronization in astral-tokio-tar
0.5.0 - 0.6.1-rc1 RUSTSEC-2026-0112
0.5.0 - 0.6.1-rc1 RUSTSEC-2026-0112
Impacted packages
Timeline
Published
2 days ago
November 03, 2026 at 12:00 PM UTC
Last Modified
4 hours ago
November 05, 2026 at 09:00 AM UTC