RustSec logo

HistoryEditJSON (OSV)

RUSTSEC-2025-0172

zip-extract is unmaintained; use the zip >= 2.4.0 crate instead

Reported
Issued
Package
zip-extract (crates.io)
Type
INFO Unmaintained
References
Patched
no patched versions

Description

The zip-extract crate has been explicitly deprecated by its author on Jul 16, 2025, and the repository was archived on Sep 8, 2025.

The author added deprecation notices README stating that the functionality is now available directly in the zip crate via ZipArchive::extract (available since zip 0.6.0) and ZipArchive::extract_unwrapped_root_dir (available since zip 2.4.0).

If you are using zip-extract, switch to the zip >= 2.4.0 crate and use the methods above instead.

Advisory available under CC0-1.0 license.