crates.io/astral-tokio-tar: medium

astral-tokio-tar has a PAX Header Desynchronization issue

Action: Upgrade astral-tokio-tar to 0.6.2 or later.

cargo update -p astral-tokio-tar --precise 0.6.2

Affected

Fixed versions

Sources

• osv: GHSA-3cv2-h65g-fgmm
• https://github.com/astral-sh/tokio-tar/security/advisories/GHSA-3cv2-h65g-fgmm
• https://github.com/astral-sh/tokio-tar
• https://rustsec.org/advisories/RUSTSEC-2026-0145.html

published 2026-05-29T19:08:23Z · modified 2026-05-29T19:15:14.574456772Z · JSON