Zeroturnaround

3 CVEs in 1 Zeroturnaround product, including Zt-Zip. Newest: CVE-2026-63499 (2026-11-03). Severity, EPSS and public exploits for each.

Zeroturnaround products with known CVEs

ProductCVEs
Zt-Zip3
Zeroturnaround CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-634992026-11-03zt-zip is a Java library that provides convenience methods for ZIP archive manipulation. Prior to 1.18.1, ZipUtil.unpack(...) can apply stored ZIP-entry permis…
CVE-2026-63436Medium6.12026-11-03zt-zip is a Java library that provides convenience methods for ZIP archive manipulation. Prior to 1.18.0, the Zips.get(zip).unpack().destination(outputDir).pro…
CVE-2018-1002201Medium5.52018-07-25zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that i…