Vulnerability in M2team Nanazip

CVE-2026-27014

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop, and deeply nested directories cause unbounded recursion (stack overflow) in the ROM…

EPSS: 0.000 (4.6th percentile) — read the EPSS interpretation.

Affected products

M2team Nanazip — versions >= 5.0.1252.0, < 6.0.1630.0

Weakness classification (CWE)

CWE-674 — Uncontrolled Recursion

References

https://github.com/M2Team/NanaZip/security/advisories/GHSA-fc89-3f57-h9q5 (x_refsource_CONFIRM)