VulnerabilityPublished 3 Nov 2026Updated 5 Nov 2026

`astral-tokio-tar` is unmaintained

Affects astral-tokio-tarSource GCVE Database

Severity

Unrated

Rated by Threat Radar

Data as of 5 Nov 2026, 09:20 UTC

What to do

Affected software

Product	Affected	Fixed in
crates.ioastral-tokio-tar`pkg:cargo/astral-tokio-tar`Other threats	Affected >=0.0.0-0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should stop using `astral-tokio-tar` and migrate to the recommended `tar-codec` crate to ensure continued support and security updates. No patches or fixes are available for `astral-tokio-tar` as it is deprecated.

Description

The Rust crate `astral-tokio-tar` has been officially unmaintained since November 3, 2026. All versions of this crate are deprecated and no longer receive updates or security patches. Users are advised to migrate to the recommended alternative crate `tar-codec` for strict tar encoding and decoding functionality.

Impact

Since the crate is unmaintained, any existing or future vulnerabilities will not be fixed, potentially exposing users to security risks if they continue to use it. However, no specific vulnerabilities or exploits are reported at this time.

Summary

`astral-tokio-tar` is a Rust crate that was maintained by Astral but maintenance ended on November 3, 2026. The crate is now deprecated and unmaintained, meaning no further fixes, including security patches, will be provided. The vendor recommends using the `tar-codec` crate as a replacement for strict tar encoding and decoding. There is no specific vulnerability or exploit detailed in the provided information, only the cessation of maintenance.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 5 Nov 2026, 09:20 UTC

Technical details

References

Community reviews

Related threats