RUSTSEC-2025-0172

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2025-0172

Import Source

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2025-0172

Published

2025-07-16T12:00:00Z

Modified

2026-08-31T09:30:02Z

Summary

`zip-extract` is unmaintained; use the `zip >= 2.4.0` crate instead

Details

The zip-extract crate has been explicitly deprecated by its author on Jul 16, 2025, and the repository was archived on Sep 8, 2025.

The author added deprecation notices README stating that the functionality is now available directly in the zip crate via ZipArchive::extract (available since zip 0.6.0) and ZipArchive::extract_unwrapped_root_dir (available since zip 2.4.0).

If you are using zip-extract, switch to the zip >= 2.4.0 crate and use the methods above instead.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

{
    "affected_functions": null,
    "affects": {
        "arch": [],
        "functions": [],
        "os": []
    }
}