Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
12M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-32766: Tar Pax Extension Silent Error Skipcve-2026-32766-tar-pax-extension-silent-error-skip

Silently skipping malformed PAX extensions by using `filter_map(|f| f.ok())` can conceal parsing errors and lead to parser differentials. This behavior can be exploited if a subsequent component interprets the skipped malformed extension differently. Propagate the error using `?` or handle it explicitly instead of suppressing it.

by Provallyupdated 2026-06-23Apache-2.0
3K0 direct3K via packs
downloads
65quality
All matching rules loaded.