Skip to content
OpenAdvisories

Package · crates.io

uncbv

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.1
    RUSTSEC-2026-0307

    `uncbv`: archive extraction is vulnerable to path traversal (zip-slip)

    ### Summary `uncbv extract` writes each archive entry to `output_dir.join(entry_filename)` using the filename stored in the archive with no check for `..` components or absolute paths. A malicious `.cbv` / `.cbz` archive whose entry name contains `../` (or an…

    uncbv crates.io