CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2026-10-30
sevenz-rust2 Path Traversal and Arbitrary File Overwrite Vulnerability (CVE-2026-61725)
[Affected Scope] Rust applications utilizing sevenz-rust2 library versions prior to 0.21.1.
[Impact] Extraction of a malicious 7z archive can lead to writing or overwriting files outside the intended directory, potentially resulting in Remote Code Execution (RCE).
[Mitigation] Immediately upgrade sevenz-rust2 dependency to version 0.21.1 or later.