Skip to content
OpenAdvisories

Package · crates.io

sn-releases

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    RUSTSEC-2026-0427

    `sn-releases`: `extract_release_archive` writes archive entries without a path-traversal check (zip-slip)

    `SafeReleaseRepoActions::extract_release_archive` builds each output path from the **raw archive entry name** and writes to it with no traversal check, so a malicious release archive can create directories and write files **outside** the destination directory…

    sn-releases crates.io