CVE-2026-115909 | zip-rs zip2 up to 8.x Extraction src/read/mod.rs ZipArchive::extract allocation of resources

October 26, 2026 Yanac

A vulnerability classified as problematic was found in zip-rs zip2 up to 8.x. This affects the function ZipArchive::extract of the file src/read/mod.rs of the component Extraction. Executing a manipulation can lead to allocation of resources.

This vulnerability appears as CVE-2026-115909. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More