{"api_version":"v1","generated_at":"2026-10-10T03:40:00+00:00","product":{"cve_count":3,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-astral-sh-tokio-tar-4d909594c12c","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"tokio-tar","next_cursor":null,"observations":[{"affected":"< 0.6.0","affected_versions_present":true,"cve_id":"CVE-2026-32766","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-32766","fixed":"0.6.0.","last_modified":"2026-03-20T18:09:06.340Z","patch_url":"https://github.com/astral-sh/tokio-tar/commit/e5e0139cae4577eeedf5fc16b65e690bf988ce52","primary_source":"","published":"2026-03-20T00:07:36.444Z"},{"affected":"tokio-tar: < 0.5.6","affected_versions_present":true,"cve_id":"CVE-2025-62518","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-62518","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-10-22T13:23:33.408Z","patch_url":"","primary_source":"","published":"2025-10-21T16:13:02.646Z"},{"affected":"< 0.5.4","affected_versions_present":true,"cve_id":"CVE-2025-59825","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-59825","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-09-24T18:41:57.505Z","patch_url":"","primary_source":"","published":"2025-09-23T20:00:44.253Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"astral-sh"}}