CVE-2026-115907

Published 26 October 2026 · tracked since 27 October 2026

Description

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9.0.0, applications built with the legacy-zip feature can reserve output capacity from an attacker-controlled ZIP64 uncompressed size before validating the compressed stream. The ShrinkDecoder path in

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-72752 MEDIUM 6.5
• CVE-2026-50095 MEDIUM 6.1
• CVE-2026-116398 MEDIUM 6.5
• CVE-2026-116400 MEDIUM 6.5
• CVE-2026-115922 MEDIUM 6.2
• CVE-2026-115923 MEDIUM 6.5
• CVE-2026-115966 MEDIUM 6.5
• CVE-2026-115918 MEDIUM 6.5
• CVE-2026-115919 MEDIUM 6.2
• CVE-2026-115920 MEDIUM 6.2

→ Open the live CVE board · all tools