CVEs (2)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
2Dotnetzip.semverd Project Mihula2Dotnetzip.semverd ProdotnetzipJun 17, 2026 Nov 13, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products th...Show more |
1Dotnetzip.semverd Project 1Dotnetzip.semverd May 6, 2025 Jul 25, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerabil...Show more |