Vulnerabilities of Go standard library archive/tar
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-32288 | tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large… | 5.5 Medium | Apr 8, 2026 |
| CVE-2025-58183 | tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files | 4.3 Medium | Oct 29, 2025 |
| CVE-2022-2879 | Reader.Read does not set a limit on the maximum size of file headers | Not rated | Oct 14, 2022 |