Sharpziplib Project Sharpziplib
4 CVEs affecting Sharpziplib Project Sharpziplib. Latest disclosed: 2022-01-26. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-32840 | High | 7.3 | 2022-01-26 | SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry `../evil.txt` may be extracted in the parent directory… |
CVE-2018-1002208 | Medium | 5.5 | 2018-07-25 | SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entr… |
CVE-2021-32841 | Medium | 4.0 | 2022-01-26 | SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.3.0 and prior to version 1.3.3, a check was added if the destination file is… |
CVE-2021-32842 | Medium | 4.0 | 2022-01-26 | SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.0.0 and prior to version 1.3.3, a check was added if the destination file is… |