← Back

Dotnetzip.semverd

dotnetzip.semverd

Vendor: Dotnetzip.semverd Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Dotnetzip.semverd Project
Mihula
2Dotnetzip.semverd
Prodotnetzip
Jun 17, 2026
Nov 13, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products th...Show more
Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer.Show less
1Dotnetzip.semverd Project
1Dotnetzip.semverd
May 6, 2025
Jul 25, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerabil...Show more
DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.Show less