CVE-2026-115905

The zip library for Rust (through version 9.0.4 ) is vulnerable to a critical parser differential and security control bypass caused by dual-header inconsistencies, often referred to as Zip Cloaking . The root cause resides in src/read/stream.rs, where ZipArchive treats Central Directory File Hea...