zip vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-115907Highzip: zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed sizeCVE-2026-115908Highzip: zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. CVE-2026-115906Mediumzip: zip: AES Entry HMAC Authentication Bypass on Premature EOFCVE-2026-115909Highzip: zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During ExtractionCVE-2026-115905Criticalzip: zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File…CVE-2025-29787Highzip: zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo