Lucene search
+L

3 matches found

osv_rustsec
osv_rustsec
•added 2026/09/23 12:00 p.m.•18 views

RUSTSEC-2026-0307 `uncbv`: archive extraction is vulnerable to path traversal (zip-slip)

Summary uncbv extract writes each archive entry to outputdir.joinentryfilename using the filename stored in the archive with no check for .. components or absolute paths. A malicious .cbv / .cbz archive whose entry name contains ../ or an absolute path can therefore cause files to be written...

7.1CVSS5.9AI score
SaveExploits0References3
Rows per page
Query Builder