All 3 CVE vulnerabilities found in zt-zip, with AI-generated Chinese analysis, references, and POCs.
Vendor: zeroturnaround
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-63499 | zt-zip: ZipUtil.unpack can change file permissions of output directory CWE-23 | 6.9 | Medium | 2026-11-03 |
| CVE-2026-63436 | zt-zip: Path traversal in fluent API unpack CWE-22 | 6.1 | Medium | 2026-11-03 |
| CVE-2018-1002201 | zt-zip 路径遍历漏洞 CWE-22 | 5.5 | - | 2018-07-25 |
All 3 known CVE vulnerabilities affecting zt-zip with full Chinese analysis, references, and POCs where available.