Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the Unarchive process. An attacker can overwrite arbitrary files outside the intended destination directory by crafting a zip archive with directory traversal sequences in file names and supplying it through a...

EUVD-2025-33393

BBOT's various issues in unarchive.py can cause arbitrary file write and RCE...

EUVD-2024-0369

Malicious code in bioql PyPI...

SUSE CVE-2025-3445

A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the library. When using the...