unzip vulnerabilities
CVEs whose affected-version data names the unzip package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
RUSTSEC-2026-0296None`unzip` is unmaintained
`unzip` is unmaintained
RUSTSEC-2026-0297None`unzip`: archive extraction is vulnerable to path traversal (zip-slip)
`unzip`: archive extraction is vulnerable to path traversal (zip-slip)
CVE-2022-0530Medium· 5.5A flaw was found in Unzip
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a cra…
CVE-2022-0529Medium· 5.5PoCA flaw was found in Unzip
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a cra…