Path Traversal in Zip-rs Zip2
CVE-2025-29787
`zip` is a zip library for rust which supports reading and writing of simple ZIP files. In the archive extraction routine of affected versions of the `zip` crate starting with version 1.3.0 and prior to version 2.3.0, symbolic links earlie…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.005 (39.6th percentile) — read the EPSS interpretation.
Affected products
- Zip-rs Zip2 — versions >= 1.3.0, < 2.3.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)