Zip

This hub aggregates every CVE we track for Zip, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 5 most recently published vulnerabilities affecting Zip.

• CVE-2025-29787zip Vulnerable to Incorrect Path Canonicalization During Archive Extraction, Leading to Arbitrary File WriteMar 17, 2025
• CVE-2023-39135An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry.7.8Aug 30, 2023
• CVE-2018-13684The mintToken function of a smart contract implementation for ZIP, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any va...7.5Jul 9, 2018
• CVE-2018-13410Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact bec...9.8Jul 6, 2018
• CVE-2004-1010Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname.10.0Nov 9, 2004