Malicious code in ext-zip (npm)

The package ext-zip was found to contain malicious code...

MAL-2025-20103 Malicious code in ext-zip (npm)

The package ext-zip was found to contain malicious code...

SUSE CVE-2014-9767

Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/phpzip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/extzip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive...

CVE-2016-6297: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer overflow in the phpstreamzipopener function in ext/zip/zipstream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via a crafted zip:// URL...