CVE-2026-115907

The zip library for Rust (versions 5.1.0 through 9.0.0) is vulnerable to a denial of service when using the legacy-zip feature. Applications can experience a panic during ZipArchive::extract because the ShrinkDecoder (in src/legacy/shrink.rs), as well as the Reduce and Implode decoders, perform u...