14648 matches found
CLSA-2026-1790180021 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.16-tuxcare.2...
CLSA-2026-1790176614 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.10-tuxcare.1...
CLSA-2026-1790166345 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.17-tuxcare.2...
CLSA-2026-1790165044 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.12-tuxcare.1...
RUSTSEC-2026-0307 `uncbv`: archive extraction is vulnerable to path traversal (zip-slip)
Summary uncbv extract writes each archive entry to outputdir.joinentryfilename using the filename stored in the archive with no check for .. components or absolute paths. A malicious .cbv / .cbz archive whose entry name contains ../ or an absolute path can therefore cause files to be written...
`uncbv`: archive extraction is vulnerable to path traversal (zip-slip)
Summary uncbv extract writes each archive entry to outputdir.joinentryfilename using the filename stored in the archive with no check for .. components or absolute paths. A malicious .cbv / .cbz archive whose entry name contains ../ or an absolute path can therefore cause files to be written...
CLSA-2026-1790162696 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.16-tuxcare.1...
CLSA-2026-1790162622 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.18-tuxcare.2...
CLSA-2026-1790161409 TuxCare security update for adm-zip (2 CVEs)
TuxCare rebuilt adm-zip to address 2 CVEs. Fixed in 0.6.0-tuxcare.2...
CLSA-2026-1790161376 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.17-tuxcare.1...
CVE-2026-65970
A flaw was found in OpenImageIO, a toolset for image file manipulation. A remote attacker could exploit this vulnerability by providing a specially crafted ZIP-compressed TIFF image file. When processed with TIFF multithreading enabled, the software can prematurely release memory while background...
PT-2026-105970
Summary uncbv extract writes each archive entry to output dir.joinentry filename using the filename stored in the archive with no check for .. components or absolute paths. A malicious .cbv / .cbz archive whose entry name contains ../ or an absolute path can therefore cause files to be written...
PT-2026-105394
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.17-tuxcare.2...
PT-2026-105388
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.18-tuxcare.2...
CVE-2026-79306: Improper Limitation of a Pathname to a Restricted Directory
CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint. An authenticated remote attacker with ownership of any configured domain can supply absolute or otherwise out-of-scope file paths in the listOfFiles JSON property...
EUVD-2026-85402
CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint. An authenticated remote attacker with ownership of any configured domain can supply absolute or otherwise out-of-scope file paths in the listOfFiles JSON property...
PT-2026-105378
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.17-tuxcare.1...
PT-2026-105412
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.10-tuxcare.1...