VendorsGNUtar1.35
Vulnerabilities

GNU Tar 1.35

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2026-18508
Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
Published 2026-08-03 · Modified
4.4EPSS 0.001
CVE-2026-18477
Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape
Published 2026-08-03 · Modified
4.4EPSS 0.001