Skip to content
OpenAdvisories

Package · Debian

rust-sevenz-rust2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.1
    CVE-2026-61725

    sevenz-rust2: unchecked 7z entry paths permit traversal and absolute-path file overwrites

    sevenz-rust2 is a Rust-native 7z compressor and `decompress`or. Prior to 0.21.1, extracting an attacker-supplied 7z archive can write or overwrite files outside the destination directory. In `src/util/decompress.rs`, `decompress_impl` computes each destinatio…

    hasenbanck sevenz-rust2 rust-sevenz-rust2 rust-sevenz-rust2 Debian Ubuntu