danifus vulnerabilities

Products

• pyzipper 1

Latest danifus CVEs

Newest publication first

1. CVE-2026-44722 pyzipper: Encryption bypass for small files encrypted with pyzipper

   Published 2026-07-17

   Medium·CVSS 6.2 EPSS 0.12%

   pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python operator precedence bug in pyzipper/zipfile_aes.py caused the AE-2 format to never be automatically selected during encryption, causing encrypted entries to be...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.