Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
zip
|
Incorrect path canonicalization during Archive Extraction Leading to Arbitrary File Write | Unknown | 1 year ago | 3 hours ago |
adm-zip
|
adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation | High Risk 7.1 | 13 days ago | 4 days ago |
go.opentelemetry.io/otel/exporters/zipkin
|
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs | Low Risk 3.0 | 25 days ago | 11 days ago |
|
go.opentelemetry.io/otel/exporters/zipkin
|
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace | Unknown | 11 days ago | 11 days ago |
|
adm-zip
|
adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS) | High Risk 7.5 | 12 days ago | 12 days ago |
|
adm-zip
|
adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path | Medium Risk 5.3 | 12 days ago | 12 days ago |
|
adm-zip
|
adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content | Medium Risk 5.9 | 12 days ago | 12 days ago |
rubyzip
|
rubyzip path traversal vulnerability | High Risk 7.5 | 1 month ago | 17 days ago |
|
zip-bundle
|
Malicious code in zip-bundle (npm) | Unknown | 1 month ago | 18 days ago |
|
unzip
|
`unzip` is unmaintained | Unknown | 21 days ago | 21 days ago |
|
unzip
|
`unzip`: archive extraction is vulnerable to path traversal (zip-slip) | Unknown | 1 month ago | 21 days ago |
|
adm-zip
|
adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS) | High Risk 7.5 | 24 days ago | 24 days ago |
|
adm-zip
|
adm-zip: Crafted ZIP file triggers 4GB memory allocation | High Risk 7.5 | 3 months ago | 1 month ago |
|
extract-zip
|
extract-zip unvalidated symlink path traversal | High Risk 8.1 | 3 months ago | 1 month ago |
|
zip
|
zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write | High Risk 8.0 | 1 year ago | 1 month ago |
pyminizip
|
pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency | Critical 9.8 | 2 years ago | 1 month ago |
org.zeroturnaround:zt-zip
|
Improper Limitation of a Pathname to a Restricted Directory in zt-zip | Medium Risk 5.5 | 4 years ago | 1 month ago |
|
zipp
|
zipp Denial of Service vulnerability | Medium Risk 6.2 | 2 years ago | 1 month ago |
|
zip-local
|
Exposure of Resource to Wrong Sphere in Zip-Local | Critical 9.8 | 4 years ago | 1 month ago |
|
bestzip
|
Command injection in bestzip | Critical 9.8 | 5 years ago | 1 month ago |
dotnetzip
|
DotNetZip Zip-Slip Vulnerability | Medium Risk 5.5 | 7 years ago | 1 month ago |
|
adm-zip
|
adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
extract-zip
|
extract-zip allows arbitrary file writes through symlink archive entries | High Risk 8.1 | 1 month ago | 1 month ago |
|
elf-stats-marzipan-saddlebag-291
|
Malicious code in elf-stats-marzipan-saddlebag-291 (npm) | Unknown | 3 months ago | 1 month ago |
|
elf-stats-marzipan-sled-824
|
Malicious code in elf-stats-marzipan-sled-824 (npm) | Unknown | 3 months ago | 1 month ago |
|
zip-extract
|
`zip-extract` is unmaintained; use the `zip >= 2.4.0` crate instead | Unknown | 1 year ago | 1 month ago |
|
gunzip-js
|
Malicious code in gunzip-js (npm) | Unknown | 1 month ago | 1 month ago |
|
@keyv/compress-gzip
|
Malicious code in @keyv/compress-gzip (npm) | Unknown | 2 months ago | 2 months ago |
|
test-skill-zip
|
Malicious code in test-skill-zip (npm) | Unknown | 2 months ago | 2 months ago |
|
lambzip16834
|
Malicious code in lambzip16834 (RubyGems) | Unknown | 3 months ago | 2 months ago |
|
pyzipper
|
pyzipper has an encryption bypass for small files encrypted using it | Medium Risk 6.2 | 5 months ago | 3 months ago |
|
pyzipper
|
pyzipper has an encryption bypass for small files encrypted using it | Medium Risk 6.2 | 3 months ago | 3 months ago |
|
sharpziplib
|
Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib | Medium Risk 5.5 | 4 years ago | 3 months ago |
|
zipp
|
zipp Denial of Service vulnerability | Medium Risk 6.2 | 3 months ago | 3 months ago |
|
pyminizip
|
pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency | Critical 9.8 | 3 months ago | 3 months ago |
|
opentelemetry.exporter.zipkin
|
OpenTelemetry's Zipkin remote endpoint cache could grow without bounds and increase memory pressure | Medium Risk 5.3 | 5 months ago | 5 months ago |
|
zip.js-2.8.2
|
Malicious code in zip.js-2.8.2 (npm) | Unknown | 6 months ago | 6 months ago |
|
pyunzip
|
Malicious code in pyunzip (PyPI) | Unknown | 2 years ago | 6 months ago |
|
dziplib
|
Malicious code in dziplib (PyPI) | Unknown | 1 year ago | 6 months ago |
|
net.lingala.zip4j:zip4j
|
Improper Limitation of a Pathname to a Restricted Directory in Zip4j | Medium Risk 6.5 | 4 years ago | 7 months ago |
|
minizip
|
Malicious code in minizip (PyPI) | Unknown | 10 months ago | 7 months ago |
|
cryptozip
|
Malicious code in cryptozip (PyPI) | Unknown | 9 months ago | 7 months ago |
|
extrazip
|
Malicious code in extrazip (PyPI) | Unknown | 9 months ago | 7 months ago |
|
unizip
|
Malicious code in unizip (PyPI) | Unknown | 9 months ago | 7 months ago |
|
uzip
|
Malicious code in uzip (PyPI) | Unknown | 10 months ago | 7 months ago |
|
uuzip
|
Malicious code in uuzip (PyPI) | Unknown | 10 months ago | 7 months ago |
|
ziphash
|
Malicious code in ziphash (PyPI) | Unknown | 9 months ago | 7 months ago |
|
yzip
|
Malicious code in yzip (PyPI) | Unknown | 10 months ago | 7 months ago |
|
kzip
|
Malicious code in kzip (PyPI) | Unknown | 10 months ago | 7 months ago |
|
gxzip
|
Malicious code in gxzip (PyPI) | Unknown | 10 months ago | 7 months ago |
Page 1