Skip to content
OpenAdvisories

Vendor

rikyoz

3 known vulnerabilities.

Products

bit7z 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-45384

    bit7z: Arbitrary File Overwrite via Symlink Attack on Predictable Temp File During Archive Update

    bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.12, there is an arbitrary file overwrite vulnerability via symlink attack on predictable temp files during archive update. This issue ha…

    rikyoz bit7z
  • Medium 5.5
    CVE-2026-27117

    bit7z has a path traversal vulnerability

    bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.11, a path traversal vulnerability ("Zip Slip") exists in bit7z's archive extraction functionality. The library does not adequately vali…

    rikyoz bit7z