{"uuid": "9f17612d-17d6-41df-b083-9c8794854bd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-62518", "type": "seen", "source": "https://t.me/thehackernews/7764", "content": "A tiny Rust bug just broke thousands of builds.\n\nIt\u2019s called TARmageddon (CVE-2025-62518) \u2014 a flaw in the async-tar library that lets attackers slip hidden files inside nested TAR archives.\n\nUnpatched since 2023, developers are now racing to fix it \u2193 https://thehackernews.com/2025/10/tarmageddon-flaw-in-async-tar-rust.html", "creation_timestamp": "2025-10-22T07:12:40.000000Z"}