Security
فارسی
All products

zip

Rust / Cargo · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCECVE-2026-115905 · GHSA-M665-V7PM-7GRJ zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat Critical Fix reported
zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During ExtractionCVE-2026-115909 · GHSA-Q7V9-X93C-XQV3Version ranges need review. zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat High Fix reported
zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed sizeCVE-2026-115907 · GHSA-9HJ8-73FH-9963 zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat High Fix reported
zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. CVE-2026-115908 · GHSA-HJQX-J4RW-G7XV zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat High Fix reported
zip: AES Entry HMAC Authentication Bypass on Premature EOFCVE-2026-115906 · GHSA-8HXF-QR8P-62X4 zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat Medium Fix reported
zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directoryGHSA-4V9H-P7M9-RH26 · RUSTSEC-2026-0368 zip Rust / Cargo Unknown Fix reported
ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the targetGHSA-4684-H2Q9-2VCP · RUSTSEC-2026-0369 zip Rust / Cargo Critical Fix reported
Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege EscalationGHSA-VV5M-JXXH-4627 · RUSTSEC-2026-0367 zip Rust / Cargo High Fix reported
zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File WriteCVE-2025-29787 · GHSA-94VH-GPHV-8PM8Version ranges need review. zip Rust / Cargo High Fix reported