Skip to content
OpenAdvisories

Vendor

nfriedly

2 known vulnerabilities.

Products

bestzip 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2026-87794

    bestzip 2.2.6 and 3.0.2 Argument Injection via the Native Zip Destination

    bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP backend. Attackers can supply a malicious destination path combined with crafted source …

    nfriedly bestzip
  • High 8.4
    CVE-2026-80427

    bestzip before 2.2.6 and 3.0.x before 3.0.2 Argument Injection via Missing Option Delimiter

    bestzip builds the argument list for the system zip utility without separating options from operands. The destination archive path and the caller-supplied source paths are passed to the child process with no -- delimiter between them, so any source entry begi…

    nfriedly bestzip