high7.5
CVE-2026-115909Fix available
zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction
zip crates.io
| Affected range | Recorded fix |
|---|---|
| From 1.3.0 before 9.0.0Semantic versions | 9.0.0 |
Version evidence: OSV · GHSA-q7v9-x93c-xqv3
View original version evidence
{
"ranges": [
{
"events": [
{
"introduced": "1.3.0"
},
{
"fixed": "9.0.0"
}
],
"type": "SEMVER"
}
],
"versions": []
}