Lucene search
+L
RikyozBit7z

1 matches found

CVE
CVE
added 2026/02/24 9:46 p.m.50 views

CVE-2026-27117

CVE-2026-27117 concerns bit7z, a cross-platform C++ static library used for archive compression/extraction. Prior to 4.0.11, its archive extraction lacks proper validation of entry paths, enabling Zip Slip path traversal via relative paths, absolute paths, or symbolic links. This can allow writin...

7.5CVSS5.8AI score0.00309EPSS
Save