zip
Zip implementation in Rust
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 131
- Cadence
- ~7 days
- Last 12 months
- 19
Reach
- Downloads
- 235.2M
- Stars
- 345
Details
- License
- MIT
- First release
- Nov 21, 2014
| Version | Released | |
|---|---|---|
9.0.0-pre3
pre
|
9.0.0-pre3
pre
Dependencies (32)
+ 24 more
Changelog
Compare changes
|
|
9.0.0-pre2
unknown
|
9.0.0-pre2
unknown
Dependencies (32)
+ 24 more
Changelog
Compare changes
|
|
9.0.0-pre1
unknown
|
9.0.0-pre1
unknown
Dependencies (32)
+ 24 more
Changelog
Compare changes
|
|
8.6.0
unknown
|
8.6.0
unknown
Dependencies (32)
+ 24 more
Changelog
Compare changes
|
|
8.5.1
unknown
|
8.5.1
unknown
Dependencies (32)
+ 24 more
Changelog
Compare changes
|
|
8.5.0
unknown
|
8.5.0
unknown
Dependencies (32)
+ 24 more
Changelog
Compare changes
|
|
8.4.0
unknown
|
8.4.0
unknown
Dependencies (32)
+ 24 more
Changelog
Compare changes
|
|
8.3.1
unknown
|
8.3.1
unknown
Dependencies (32)
+ 24 more
Changelog
Compare changes
|
|
8.3.0
unknown
|
8.3.0
unknown
Dependencies (32)
+ 24 more
Changelog
Compare changes
|
|
8.2.0
unknown
|
8.2.0
unknown
Dependencies (32)
+ 24 more
Changelog
Compare changes
|
|
8.1.0
unknown
|
8.1.0
unknown
Dependencies (32)
+ 24 more
Changelog
Compare changes
|
|
8.0.0
unknown
|
8.0.0
unknown
Dependencies (32)
+ 24 more
Changelog
Compare changes
|
|
7.4.0
unknown
yanked
|
7.4.0
unknown
yanked
Dependencies (32)
+ 24 more
Changelog
Compare changes
|
|
7.3.0
unknown
yanked
|
7.3.0
unknown
yanked
Dependencies (32)
+ 24 more
Changelog
Compare changes
|
|
7.3.0-pre1
unknown
|
7.3.0-pre1
unknown
Dependencies (33)
+ 25 more
Changelog
Compare changes
|
|
7.2.0
unknown
|
7.2.0
unknown
Dependencies (33)
+ 25 more
Changelog
Compare changes
|
|
7.1.0
unknown
| ||
7.0.0
unknown
|
7.0.0
unknown
Dependencies (31)
+ 23 more
Changelog
Compare changes
|
|
6.0.0
unknown
|
6.0.0
unknown
Dependencies (30)
+ 22 more
Changelog
Compare changes
|
|
5.1.1
unknown
|
5.1.1
unknown
Dependencies (30)
+ 22 more
Changelog
Compare changes
|
|
5.1.0
unknown
|
5.1.0
unknown
Dependencies (30)
+ 22 more
Changelog
Compare changes
|
|
5.0.1
unknown
|
5.0.1
unknown
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
5.0.0
unknown
|
5.0.0
unknown
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
4.6.1
unknown
|
4.6.1
unknown
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
4.6.0
unknown
|
4.6.0
unknown
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
4.5.0
unknown
|
4.5.0
unknown
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
4.4.0
unknown
|
4.4.0
unknown
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
4.3.0
unknown
|
4.3.0
unknown
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
4.2.0
unknown
|
4.2.0
unknown
Dependencies (28)
+ 20 more
Changelog
Compare changes
|
|
4.1.0
unknown
|
4.1.0
unknown
Dependencies (28)
+ 20 more
Changelog
Compare changes
|
|
4.0.0
unknown
|
4.0.0
unknown
Dependencies (28)
+ 20 more
Changelog
Compare changes
|
|
3.0.0
unknown
|
3.0.0
unknown
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
2.6.1
unknown
yanked
|
2.6.1
unknown
yanked
Dependencies (31)
+ 23 more
Changelog
Compare changes
|
|
2.6.0
unknown
yanked
|
2.6.0
unknown
yanked
Dependencies (31)
+ 23 more
Changelog
Compare changes
|
|
2.5.0
unknown
yanked
|
2.5.0
unknown
yanked
Dependencies (31)
+ 23 more
Changelog
Compare changes
|
|
2.4.2
unknown
|
2.4.2
unknown
Dependencies (31)
+ 23 more
Changelog
Compare changes
|
|
2.4.1
unknown
|
2.4.1
unknown
Dependencies (31)
+ 23 more
Changelog
Compare changes
|
|
2.4.0
unknown
|
2.4.0
unknown
Dependencies (31)
+ 23 more
Changelog
Compare changes
|
|
2.3.0
unknown
|
2.3.0
unknown
Dependencies (31)
+ 23 more
Changelog
Compare changes
|
|
2.2.3
unknown
yanked
1 CVE
CVE-2025-29787
GHSA-94vh-gphv-8pm8
RUSTSEC-2025-0168
Mar 17, 2025
zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write
High
Network
High
Low
None
SummaryIn the archive extraction routine of affected versions of the DetailsThis is a variant of the zip-slip vulnerability, we can make the extraction logic step outside of the target directory by creating a symlink to the parent directory and then extracting further files through that symlink. The documentation of the [
Most archive software either decline to extract symlinks that traverse out of the directory or defer creation of symlinks after all files have been created to prevent unexpected behavior when later entries depend on earlier symbolic link entries. PoChttps://gist.github.com/eternal-flame-AD/bf71ef4f6828e741eb12ce7fd47b7b85 ImpactUsers who extract untrusted archive files using the following high-level API method may be affected and critical files on the system may be overwritten with arbitrary file permissions, which can potentially lead to code execution.
Fixed in
2.3.0
References
Updated Sep 10, 2026 · Source: OSV.dev |
2.2.3
unknown
yanked
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
2.2.2
unknown
yanked
1 CVE
CVE-2025-29787
GHSA-94vh-gphv-8pm8
RUSTSEC-2025-0168
Mar 17, 2025
zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write
High
Network
High
Low
None
SummaryIn the archive extraction routine of affected versions of the DetailsThis is a variant of the zip-slip vulnerability, we can make the extraction logic step outside of the target directory by creating a symlink to the parent directory and then extracting further files through that symlink. The documentation of the [
Most archive software either decline to extract symlinks that traverse out of the directory or defer creation of symlinks after all files have been created to prevent unexpected behavior when later entries depend on earlier symbolic link entries. PoChttps://gist.github.com/eternal-flame-AD/bf71ef4f6828e741eb12ce7fd47b7b85 ImpactUsers who extract untrusted archive files using the following high-level API method may be affected and critical files on the system may be overwritten with arbitrary file permissions, which can potentially lead to code execution.
Fixed in
2.3.0
References
Updated Sep 10, 2026 · Source: OSV.dev |
2.2.2
unknown
yanked
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
2.2.1
unknown
yanked
1 CVE
CVE-2025-29787
GHSA-94vh-gphv-8pm8
RUSTSEC-2025-0168
Mar 17, 2025
zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write
High
Network
High
Low
None
SummaryIn the archive extraction routine of affected versions of the DetailsThis is a variant of the zip-slip vulnerability, we can make the extraction logic step outside of the target directory by creating a symlink to the parent directory and then extracting further files through that symlink. The documentation of the [
Most archive software either decline to extract symlinks that traverse out of the directory or defer creation of symlinks after all files have been created to prevent unexpected behavior when later entries depend on earlier symbolic link entries. PoChttps://gist.github.com/eternal-flame-AD/bf71ef4f6828e741eb12ce7fd47b7b85 ImpactUsers who extract untrusted archive files using the following high-level API method may be affected and critical files on the system may be overwritten with arbitrary file permissions, which can potentially lead to code execution.
Fixed in
2.3.0
References
Updated Sep 10, 2026 · Source: OSV.dev |
2.2.1
unknown
yanked
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
2.2.0
unknown
yanked
1 CVE
CVE-2025-29787
GHSA-94vh-gphv-8pm8
RUSTSEC-2025-0168
Mar 17, 2025
zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write
High
Network
High
Low
None
SummaryIn the archive extraction routine of affected versions of the DetailsThis is a variant of the zip-slip vulnerability, we can make the extraction logic step outside of the target directory by creating a symlink to the parent directory and then extracting further files through that symlink. The documentation of the [
Most archive software either decline to extract symlinks that traverse out of the directory or defer creation of symlinks after all files have been created to prevent unexpected behavior when later entries depend on earlier symbolic link entries. PoChttps://gist.github.com/eternal-flame-AD/bf71ef4f6828e741eb12ce7fd47b7b85 ImpactUsers who extract untrusted archive files using the following high-level API method may be affected and critical files on the system may be overwritten with arbitrary file permissions, which can potentially lead to code execution.
Fixed in
2.3.0
References
Updated Sep 10, 2026 · Source: OSV.dev |
2.2.0
unknown
yanked
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
2.1.6
unknown
yanked
1 CVE
CVE-2025-29787
GHSA-94vh-gphv-8pm8
RUSTSEC-2025-0168
Mar 17, 2025
zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write
High
Network
High
Low
None
SummaryIn the archive extraction routine of affected versions of the DetailsThis is a variant of the zip-slip vulnerability, we can make the extraction logic step outside of the target directory by creating a symlink to the parent directory and then extracting further files through that symlink. The documentation of the [
Most archive software either decline to extract symlinks that traverse out of the directory or defer creation of symlinks after all files have been created to prevent unexpected behavior when later entries depend on earlier symbolic link entries. PoChttps://gist.github.com/eternal-flame-AD/bf71ef4f6828e741eb12ce7fd47b7b85 ImpactUsers who extract untrusted archive files using the following high-level API method may be affected and critical files on the system may be overwritten with arbitrary file permissions, which can potentially lead to code execution.
Fixed in
2.3.0
References
Updated Sep 10, 2026 · Source: OSV.dev |
2.1.6
unknown
yanked
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
2.1.5
unknown
yanked
1 CVE
CVE-2025-29787
GHSA-94vh-gphv-8pm8
RUSTSEC-2025-0168
Mar 17, 2025
zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write
High
Network
High
Low
None
SummaryIn the archive extraction routine of affected versions of the DetailsThis is a variant of the zip-slip vulnerability, we can make the extraction logic step outside of the target directory by creating a symlink to the parent directory and then extracting further files through that symlink. The documentation of the [
Most archive software either decline to extract symlinks that traverse out of the directory or defer creation of symlinks after all files have been created to prevent unexpected behavior when later entries depend on earlier symbolic link entries. PoChttps://gist.github.com/eternal-flame-AD/bf71ef4f6828e741eb12ce7fd47b7b85 ImpactUsers who extract untrusted archive files using the following high-level API method may be affected and critical files on the system may be overwritten with arbitrary file permissions, which can potentially lead to code execution.
Fixed in
2.3.0
References
Updated Sep 10, 2026 · Source: OSV.dev |
2.1.5
unknown
yanked
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
2.1.4
unknown
yanked
1 CVE
CVE-2025-29787
GHSA-94vh-gphv-8pm8
RUSTSEC-2025-0168
Mar 17, 2025
zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write
High
Network
High
Low
None
SummaryIn the archive extraction routine of affected versions of the DetailsThis is a variant of the zip-slip vulnerability, we can make the extraction logic step outside of the target directory by creating a symlink to the parent directory and then extracting further files through that symlink. The documentation of the [
Most archive software either decline to extract symlinks that traverse out of the directory or defer creation of symlinks after all files have been created to prevent unexpected behavior when later entries depend on earlier symbolic link entries. PoChttps://gist.github.com/eternal-flame-AD/bf71ef4f6828e741eb12ce7fd47b7b85 ImpactUsers who extract untrusted archive files using the following high-level API method may be affected and critical files on the system may be overwritten with arbitrary file permissions, which can potentially lead to code execution.
Fixed in
2.3.0
References
Updated Sep 10, 2026 · Source: OSV.dev |
2.1.4
unknown
yanked
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
2.1.3
unknown
yanked
1 CVE
CVE-2025-29787
GHSA-94vh-gphv-8pm8
RUSTSEC-2025-0168
Mar 17, 2025
zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write
High
Network
High
Low
None
SummaryIn the archive extraction routine of affected versions of the DetailsThis is a variant of the zip-slip vulnerability, we can make the extraction logic step outside of the target directory by creating a symlink to the parent directory and then extracting further files through that symlink. The documentation of the [
Most archive software either decline to extract symlinks that traverse out of the directory or defer creation of symlinks after all files have been created to prevent unexpected behavior when later entries depend on earlier symbolic link entries. PoChttps://gist.github.com/eternal-flame-AD/bf71ef4f6828e741eb12ce7fd47b7b85 ImpactUsers who extract untrusted archive files using the following high-level API method may be affected and critical files on the system may be overwritten with arbitrary file permissions, which can potentially lead to code execution.
Fixed in
2.3.0
References
Updated Sep 10, 2026 · Source: OSV.dev |
2.1.3
unknown
yanked
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
2.1.2
unknown
yanked
1 CVE
CVE-2025-29787
GHSA-94vh-gphv-8pm8
RUSTSEC-2025-0168
Mar 17, 2025
zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write
High
Network
High
Low
None
SummaryIn the archive extraction routine of affected versions of the DetailsThis is a variant of the zip-slip vulnerability, we can make the extraction logic step outside of the target directory by creating a symlink to the parent directory and then extracting further files through that symlink. The documentation of the [
Most archive software either decline to extract symlinks that traverse out of the directory or defer creation of symlinks after all files have been created to prevent unexpected behavior when later entries depend on earlier symbolic link entries. PoChttps://gist.github.com/eternal-flame-AD/bf71ef4f6828e741eb12ce7fd47b7b85 ImpactUsers who extract untrusted archive files using the following high-level API method may be affected and critical files on the system may be overwritten with arbitrary file permissions, which can potentially lead to code execution.
Fixed in
2.3.0
References
Updated Sep 10, 2026 · Source: OSV.dev |
2.1.2
unknown
yanked
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
2.1.1
unknown
yanked
1 CVE
CVE-2025-29787
GHSA-94vh-gphv-8pm8
RUSTSEC-2025-0168
Mar 17, 2025
zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write
High
Network
High
Low
None
SummaryIn the archive extraction routine of affected versions of the DetailsThis is a variant of the zip-slip vulnerability, we can make the extraction logic step outside of the target directory by creating a symlink to the parent directory and then extracting further files through that symlink. The documentation of the [
Most archive software either decline to extract symlinks that traverse out of the directory or defer creation of symlinks after all files have been created to prevent unexpected behavior when later entries depend on earlier symbolic link entries. PoChttps://gist.github.com/eternal-flame-AD/bf71ef4f6828e741eb12ce7fd47b7b85 ImpactUsers who extract untrusted archive files using the following high-level API method may be affected and critical files on the system may be overwritten with arbitrary file permissions, which can potentially lead to code execution.
Fixed in
2.3.0
References
Updated Sep 10, 2026 · Source: OSV.dev |
2.1.1
unknown
yanked
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
2.1.0
unknown
yanked
1 CVE
CVE-2025-29787
GHSA-94vh-gphv-8pm8
RUSTSEC-2025-0168
Mar 17, 2025
zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write
High
Network
High
Low
None
SummaryIn the archive extraction routine of affected versions of the DetailsThis is a variant of the zip-slip vulnerability, we can make the extraction logic step outside of the target directory by creating a symlink to the parent directory and then extracting further files through that symlink. The documentation of the [
Most archive software either decline to extract symlinks that traverse out of the directory or defer creation of symlinks after all files have been created to prevent unexpected behavior when later entries depend on earlier symbolic link entries. PoChttps://gist.github.com/eternal-flame-AD/bf71ef4f6828e741eb12ce7fd47b7b85 ImpactUsers who extract untrusted archive files using the following high-level API method may be affected and critical files on the system may be overwritten with arbitrary file permissions, which can potentially lead to code execution.
Fixed in
2.3.0
References
Updated Sep 10, 2026 · Source: OSV.dev |
2.1.0
unknown
yanked
Dependencies (29)
+ 21 more
Changelog
Compare changes
|