Skip to content
OpenAdvisories
Unscored RUSTSEC-2026-0296

`unzip` is unmaintained

Published Sep 21, 2026 · Updated Sep 21, 2026 · Assigned by RUSTSEC

Description

The [unzip](https://crates.io/crates/unzip) crate has only ever released a single
version, `0.1.0` (published 2017-12-23), and has seen no further activity. It
appears to be unmaintained, and its known path-traversal ("zip-slip")
vulnerability will not be fixed.

Consider migrating to an actively maintained alternative such as
[zip](https://crates.io/crates/zip).

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io unzip >= 0.0.0-0 — RUSTSEC-2026-0296

References