Categories ⋅ Keywords ⋅ Packages Advisories with keyword 'directory-traversal' November 6, 2026 HIGH RUSTSEC-2026-0450: Vulnerability in ocipkg ocipkg: unpacking an OCI archive can write and delete files outside the local image store (path traversal) November 2, 2026 HIGH RUSTSEC-2026-0434: Vulnerability in ant-releases ant-releases: extracting a release archive can write files outside the destination directory (path traversal / zip-slip) October 30, 2026 HIGH RUSTSEC-2026-0425: Vulnerability in nix-nar nix-nar: Decoder::unpack writes archive entries outside the destination directory (path traversal) October 30, 2026 HIGH RUSTSEC-2026-0427: Vulnerability in sn-releases sn-releases: extract_release_archive writes archive entries without a path-traversal check (zip-slip) October 3, 2026 HIGH RUSTSEC-2026-0328: Vulnerability in decompress decompress: tar-family extractors write archive entries without a path-traversal check (tar-slip) September 24, 2026 HIGH RUSTSEC-2026-0307: Vulnerability in uncbv uncbv: archive extraction is vulnerable to path traversal (zip-slip) September 21, 2026 RUSTSEC-2026-0297: Vulnerability in unzip unzip: archive extraction is vulnerable to path traversal (zip-slip) July 8, 2024 HIGH RUSTSEC-2024-0349: Vulnerability in gix-worktree Traversal outside working tree enables arbitrary code execution July 8, 2024 HIGH RUSTSEC-2024-0350: Vulnerability in gix-fs Traversal outside working tree enables arbitrary code execution July 8, 2024 HIGH RUSTSEC-2024-0348: Vulnerability in gix-index Traversal outside working tree enables arbitrary code execution November 6, 2023 LOW RUSTSEC-2023-0069: Vulnerability in sudo-rs sudo-rs: Path Traversal vulnerability January 29, 2023 RUSTSEC-2022-0082: Vulnerability in warp Improper validation of Windows paths could lead to directory traversal attack November 30, 2022 RUSTSEC-2022-0069: Vulnerability in hyper-staticfile Improper validation of Windows paths could lead to directory traversal attack August 5, 2022 RUSTSEC-2022-0043: Vulnerability in tower-http Improper validation of Windows paths could lead to directory traversal attack January 21, 2022 RUSTSEC-2021-0135 (withdrawn advisory)