Known Vulnerabilities for Unzip by Info-zip
Listed below are 10 of the newest known vulnerabilities associated with "Unzip" by "Info-zip".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-124329 json | A vulnerability was found in FlowCI flow-core-x up to 1.23.49. The impacted element is the function FileHelper.unzip of the f... | Not Provided | 2026-11-08 | 2026-11-10 |
| CVE-2026-110639 json | @mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by supp... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-108262 json | DDEV is an open-source tool for running local web development environments for PHP and Node.js. From 1.25.2 until 1.25.4, Unt... | Not Provided | 2026-11-06 | 2026-11-11 |
| CVE-2026-107224 json | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, a Zip64 uncompr... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-101009 json | A vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affected element is the function panelTask.bt_task._unzip o... | Not Provided | 2026-09-28 | 2026-10-01 |
| CVE-2026-100633 json | SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the MCP file tool's sensitive-... | Not Provided | 2026-09-26 | 2026-10-05 |
| CVE-2026-93471 json | Improper Handling of Highly Compressed Data (Data Amplification) in esaml_binding in dropbox esaml allows an unauthenticated ... | Not Provided | 2026-10-22 | 2026-10-30 |
| CVE-2026-90954 json | A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each archiv... | Not Provided | 2026-10-14 | 2026-10-19 |
| CVE-2026-78638 json | A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/ind... | Not Provided | 2026-08-25 | 2026-08-27 |
| CVE-2026-72819 json | Grav CMS before 2.0.13 contains a remote code execution vulnerability in the Flex Objects plugin settings validation that all... | Not Provided | 2026-08-14 | 2026-10-08 |