dignifiedquire vulnerabilities

Products

• async-tar 1

Latest dignifiedquire CVEs

Newest publication first

1. CVE-2026-53600 async-tar PAX extension-header desync enables tar entry/content smuggling

   Published 2026-09-02

   Medium·CVSS 6.3

   async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header (a GNU longname L, a GNU longlink K, or a PAX x/g header) instead of to the next file entry. POSIX re...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.