Skip to content
OpenAdvisories

Package · crates.io

ant-releases

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.2
    RUSTSEC-2026-0434

    `ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)

    `ant-releases` downloads and unpacks release archives from the `safe_network` / `autonomi` repositories. When it extracts an archive, it builds each output path by joining the archive entry's **own name** onto the destination directory, with no check for `..`…

    ant-releases crates.io