CyberSecBulletin

Zip-lib vulnerabilities

We track 1 vulnerability in Zip-lib products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 28, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Zip-lib vulnerabilities

  • 7.5 High severity

    zip-lib: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-17524Zip-libEPSS 1.15%

    Versions of the package zip-lib before 1.1.0 are vulnerable to Directory Traversal via the caching mechanism for path validation during the extraction process. An attacker can bypass security checks designed to prevent directory traversal. The intended securit