CyberSecBulletin

Dotnetzip.semverd Project vulnerabilities

We track 1 vulnerability in Dotnetzip.semverd Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2024.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Dotnetzip.semverd Project vulnerabilities

  • 9.8 Critical severity

    dotnetzip: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2024-48510NuGetEPSS 2.02%

    Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the mainta