Vendor

    Zip-rs

    6 known vulnerabilities in products by Zip-rs, 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Zip-rs
    CriticalCVE-2026-115905

    Zip-rs Zip2: Improper Input Validation

    also in 1 other product

    —
    HighCVE-2026-115909

    zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction

    also in 1 other product

    7.5
    HighCVE-2026-115908

    Zip-rs Zip2: Path Traversal

    also in 1 other product

    7.4
    HighCVE-2026-115907

    Zip-rs Zip2: Memory Allocation with Excessive Size Value

    also in 1 other product

    7.5
    HighCVE-2025-29787

    Zip-rs Zip2: Incorrect Behavior Order: Validate Before Canonicalize

    —
    MediumCVE-2026-115906

    zip: AES Entry HMAC Authentication Bypass on Premature EOF

    also in 1 other product

    6.5

    Products

    Products by Zip-rs
    Zip260