astral-tokio-tar versions 0.5.3 and earlier contain a path traversal vulnerability in the tar extraction process via the Entry::unpack_in_raw API. This allows tar archives to extract files outside the intended directory, bypassing the allow_external_symlinks control through crafted symlink chains. This can lead to arbitrary file writes and potential code execution. The vulnerability is rated high severity for general users of the crate but considered low severity for its main downstream user, uv, due to overlapping existing capabilities. Versions 0.5.4 and later contain a fix.