Threats tagged 'bit-golang-2025-58183'

A vulnerability in the Go programming language's archive/tar package allows unbounded memory allocation when parsing GNU tar pax 1.0 sparse files. The tar.Reader does not limit the number of sparse region data blocks, enabling a malicious archive with many sparse regions to cause excessive memory use. This can lead to large memory allocations from small compressed inputs.