Skip to content
OpenAdvisories

Vendor

izpack

1 known vulnerabilities.

Products

izpack 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-54550

    IzPack: Path Traversal in UnpackerBase allows writing files outside the installation directory via malicious pack entries

    IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack() in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacke…

    izpack izpack org.codehaus.izpack:izpack-installer Maven