Lucene search
+L

4 matches found

osv_cve
osv_cve
•added 2026/11/03 6:02 p.m.•6 views

CVE-2026-63436 zt-zip: Path traversal in fluent API unpack

zt-zip is a Java library that provides convenience methods for ZIP archive manipulation. Prior to 1.18.0, the Zips.getzip.unpack.destinationoutputDir.process fluent API in src/main/java/org/zeroturnaround/zip/Zips.java constructs output files directly from ZIP entry names without applying the...

6.1CVSS5.9AI score
SaveExploits0References6
Rows per page
Query Builder