Skip to content
OpenAdvisories

Package · crates.io

unzip

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Unscored —
    RUSTSEC-2026-0296

    `unzip` is unmaintained

    The [unzip](https://crates.io/crates/unzip) crate has only ever released a single version, `0.1.0` (published 2017-12-23), and has seen no further activity. It appears to be unmaintained, and its known path-traversal ("zip-slip") vulnerability will not be fix…

    unzip crates.io
  • Unscored —
    RUSTSEC-2026-0297

    `unzip`: archive extraction is vulnerable to path traversal (zip-slip)

    ### Summary `Unzipper::unzip` extracts each archive entry to a path built from the entry's **raw, attacker-controlled name** without any traversal check. A ZIP archive whose entry names contain `../` components (or an absolute path) can therefore cause files …

    unzip crates.io