← Database

CVE-2021-38511

HIGH CVSS: 7.5 Published: 2021-08-10 Modified: 2026-06-17

Description

An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction can create arbitrary directories via .. traversal.

Affected Platforms

Tar Project Tar

Weakness Type

CWE-59

References