CPE
The modern-tar library versions 0.3.5 through 0.8.5 are susceptible to a memory exhaustion denial-of-service vulnerability triggered by crafted, compressed archives.