RUSTSEC-2026-0296
unzip is unmaintained
- Reported
-
- Issued
-
- Package
-
unzip
(crates.io)
- Type
-
INFO
Unmaintained
- References
-
- Patched
-
no patched versions
Description
The unzip crate has only ever released a single
version, 0.1.0 (published 2017-12-23), and has seen no further activity. It
appears to be unmaintained, and its known path-traversal ("zip-slip")
vulnerability will not be fixed.
Consider migrating to an actively maintained alternative such as
zip.
Advisory available under CC0-1.0
license.