PatchTheCVEarchive\ vulnerabilities
Recent CVEs affecting archive\ products. 3 tracked.
archive\ has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-05-26. Highest priority: CVE-2026-42496 (score 48/100).
- CVE-2026-42497 HIGH 7.5 UPGRADE Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extracti
- CVE-2026-42496 CRITICAL 9.1 UPGRADE Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extra
- CVE-2026-9538 HIGH 7.5 UPGRADE Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in
FAQ
How do I fix archive\ vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is archive\ being exploited right now?
None of the tracked archive\ CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which archive\ CVE should I patch first?
CVE-2026-42496 currently ranks highest (48/100): Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extra.