Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the archivewritezipheader function when ZIP encryption is enabled and the entry file size is close to INT64MAX. An attacker can cause undefined behavior, such as incorrect Zip64 extension decisions or a...

CVE-2021-33196

In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count in an archive's header can cause a NewReader or OpenReader panic...