Ziparchive
Approved changes feed: RSS · Atom
cpe:2.3:a:ziparchive_project:ziparchive:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Ziparchive Project (c1991605-5b09-561e-923a-6dbbb4776325) |
|---|---|
| Product | Ziparchive (27a4fc3a-dce8-599b-b361-d115f0fb0b8b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/ziparchive/ziparchive |
purl2cpe | 2026-06-01 10:18:20.788890 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-36943 |
vulnerable | 2026-06-08 05:46:08.115951 |
Details available
SSZipArchive versions 2.5.3 and older contain an arbitrary file write vulnerability due to lack of sanitization on paths which are symlinks. SSZipArchive will overwrite files on the filesystem when opening a malicious ZIP containing a symlink as the first item.
Published: 2023-01-03T00:00:00.000Z
Updated: 2025-04-10T15:56:21.976Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.