Read the docs

Zip-local Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Zip-local Project records in CISA KEV

No Zip-local Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Zip-local 1 record MEDIUM

Records

1 record in Zip-local · all components

TI-2021-06148 CVE-2021-23484 · GHSA-wxj7-97fp-j53j

Arbitrary File Write via Archive Extraction (Zip Slip)

Priority MEDIUM 46

The package zip-local before 0.3.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can lead to an extraction of a crafted file outside the intended extraction directory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0205 Published 2022-01-28 Fixed in 0.3.5 CWE-22
Open these records in search →