Skip to content
OpenAdvisories

Product · Ne-Lexa

php-zip

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-16767

    Ne-Lexa php-zip ZIP ZipFile.php extractTo path traversal

    A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile::extractTo of the file src/ZipFile.php of the component ZIP Handler. Performing a manipulation of the argument entryName results in path traversal. It is possible t…

    Ne-Lexa php-zip