Skip to content

Vendor

dotnetzip.semverd project vulnerabilities

2 published CVES affecting dotnetzip.semverd project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of dotnetzip.semverd project alerts

Products

Latest dotnetzip.semverd project CVEs

Newest publication first

  1. CVE-2024-48510 DotNetZip Directory Traversal vulnerability

    Published
    CriticalCVSS 9.8 EPSS 2.0%

    Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

  2. CVE-2018-1002205 DotNetZip Zip-Slip Vulnerability

    Published
    MediumCVSS 5.5 EPSS 10.4%

    DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.