Vendor
Zip-rs
6 known vulnerabilities in products by Zip-rs, 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-115905 | Zip-rs Zip2: Improper Input Validation | — | |
| High | CVE-2026-115909 | zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction | 7.5 | |
| High | CVE-2026-115908 | Zip-rs Zip2: Path Traversal | 7.4 | |
| High | CVE-2026-115907 | Zip-rs Zip2: Memory Allocation with Excessive Size Value | 7.5 | |
| High | CVE-2025-29787 | Zip-rs Zip2: Incorrect Behavior Order: Validate Before Canonicalize | — | |
| Medium | CVE-2026-115906 | zip: AES Entry HMAC Authentication Bypass on Premature EOF | 6.5 |
Products
| Zip2 | 6 | 0 |