Rust advisories / crate
Security history · tar · data from Oct 24, 2026
Is tar safe to use? Its security history
VerdictNo open advisories. 5 past vulnerabilities were fixed; use 0.4.45 or newer to be clear of all of them.
5advisories on record
5vulnerabilities
0unmaintained notices
0.4.45newest fixed version
Every advisory, newest first
- VulnerabilityGHSA-3pv8-6f4r-ffg2 · 2026-05-29tar has a PAX header desynchronization issue
- VulnerabilityRUSTSEC-2026-0067 · 2026-03-19`unpack_in` can chmod arbitrary directories by following symlinks
- VulnerabilityRUSTSEC-2026-0068 · 2026-03-19tar-rs incorrectly ignores PAX size headers if header size is nonzero
- Vulnerability HighRUSTSEC-2021-0080 · 2021-07-19Links in archive can create arbitrary directories
- Vulnerability HighRUSTSEC-2018-0002 · 2018-06-29Links in archives can overwrite any existing file
Check your version
Run cargo tree -i tar to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
Download trends, dependents and alternatives: tar crate data.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Before you depend on ittar crate dataReal downloads, dependents and alternatives.Read it next →Did this answer your question?