Ziparchive Project Ziparchive
2 CVEs affecting Ziparchive Project Ziparchive. Latest disclosed: 2023-08-30. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-36943 | High | 8.1 | 2023-01-03 | SSZipArchive versions 2.5.3 and older contain an arbitrary file write vulnerability due to lack of sanitization on paths which are symlinks. SSZipArchive will… |
CVE-2023-39136 | Medium | 5.5 | 2023-08-30 | An unhandled edge case in the component _sanitizedPath of ZipArchive v2.5.4 allows attackers to cause a Denial of Service (DoS) via a crafted zip file. |