Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-9hj8-73fh-9963
  • crates.io/zip
 zip: legacy Shrink/Reduce/Implode decoder: denial of service from... 2 days ago
  • Fix available
  • Severity - 7.5 (High)
GHSA-hjqx-j4rw-g7xv
  • crates.io/zip
 zip: Arbitrary file write outside the extraction directory, because... 2 days ago
  • Fix available
  • Severity - 7.4 (High)
GHSA-8hxf-qr8p-62x4
  • crates.io/zip
 zip: AES Entry HMAC Authentication Bypass on Premature EOF 2 days ago
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-q7v9-x93c-xqv3
  • crates.io/zip
 zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During... 2 days ago
  • Fix available
  • Severity - 7.5 (High)
GHSA-m665-v7pm-7grj
  • crates.io/zip
 zip: Critical Parser Differential & Security Control Bypass via Dual-Header... 3 days ago
  • Fix available
  • Severity - 10.0 (Critical)
RUSTSEC-2026-0369
  • crates.io/zip
 ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions... 10 Oct
  • Fix available
  • Severity - 9.1 (Critical)
RUSTSEC-2026-0367
  • crates.io/zip
 Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to... 09 Oct
  • Fix available
  • Severity - 7.3 (High)
RUSTSEC-2026-0368
  • crates.io/zip
 zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled... 09 Oct
  • Fix available
RUSTSEC-2025-0172
  • crates.io/zip-extract
 `zip-extract` is unmaintained; use the `zip >= 2.4.0` crate instead 16 Jul 2025
  • No fix available
GHSA-94vh-gphv-8pm8
  • crates.io/zip
 zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write 17 Mar 2025
  • Fix available
  • Severity - 7.3 (High)
RUSTSEC-2025-0168
  • crates.io/zip
 Incorrect path canonicalization during Archive Extraction Leading to Arbitrary... 16 Mar 2025
  • Fix available
  • Severity - 7.3 (High)