TI-2026-80483 CVE-2026-115905 · GHSA-m665-v7pm-7grj
Parser differential in Rust zip library allows file overwrite
Priority HIGH 82
zip is a zip library for Rust that supports reading and writing simple ZIP files.
zip-rs
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
zip-rs records in CISA KEVNo zip-rs vulnerabilities are listed in CISA KEV.
Records
6 records
TI-2026-80489 CVE-2026-115907 · GHSA-9hj8-73fh-9963
Denial of service in zip crate from attacker-controlled ZIP64 size
Priority HIGH 72
zip is a zip library for Rust that supports reading and writing simple ZIP files.
TI-2025-21198 CVE-2025-29787 · GHSA-94vh-gphv-8pm8
zip Vulnerable to Incorrect Path Canonicalization During Archive Extraction, Leading to Arbitrary File Write
Priority HIGH 65
`zip` is a zip library for rust which supports reading and writing of simple ZIP files.
TI-2026-80488 CVE-2026-115906 · GHSA-8hxf-qr8p-62x4
Authentication bypass in zip Rust crate lets modified AES entries pass
Priority MEDIUM 62
zip is a zip library for Rust that supports reading and writing simple ZIP files.
TI-2026-80491 CVE-2026-115909 · GHSA-q7v9-x93c-xqv3
Excessive allocation in zip Rust crate aborts extraction of symlinks
Priority LOW 39
zip is a zip library for Rust that supports reading and writing simple ZIP files.
TI-2026-80490 CVE-2026-115908 · GHSA-hjqx-j4rw-g7xv
Arbitrary file write outside extraction directory in Rust zip crate
Priority LOW 33
zip is a zip library for Rust that supports reading and writing simple ZIP files.