Skip to content
OpenAdvisories

Package · crates.io

eazip

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    RUSTSEC-2026-0503

    eazip: symlink-target validation checks the wrong argument, allowing extraction path escapes on Windows

    When extracting archives, `eazip` validates symlink entries before writing them. The validation function `validate_symlink()` (`src/utils/mod.rs`) scans for backslash and NUL bytes, but passes the symlink's *name* where the symlink's *target* was intended: ``…

    eazip crates.io