`zip`

Ecosystem:
cargo

Package URL:
pkg:cargo/zip

Total PRs:
2,574 Dependabot PRs

Latest PR:
5 days ago

Unique Repositories:
645 repositories

Unique Repos (30 days):
13 repositories

Security Advisories

zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write

GHSA-94vh-gphv-8pm8 CVE-2025-29787 HIGH published over 1 year ago • updated 4 days ago

### Summary In the archive extraction routine of affected versions of the `zip` crate, symbolic links earlier in the archive are allowed to be us...

Recent PRs

RSS Feed

build(deps): bump the rust-all group across 1 directory with 39 updates

PlanetaZero/zeroclaw #42

8.1.0 → 8.6.0 Minor PR

Open 5 days ago 2 comments

build(deps): update zip requirement from 4 to 8 in /desktop/src-tauri

jrwinget/loom #334

4 → 8

Open 14 days ago 3 comments

Bump zip from 2.4.2 to 8.6.0 in /src-tauri

almondsun/insight #8

2.4.2 → 8.6.0 Major PR

Closed 16 days ago 2 comments

chore(deps): bump the cargo-deps group across 1 directory with 41 updates

SHLE1/cc-switch-lite #14

2.4.2 → 4.6.1 Major PR

Open 23 days ago 1 comment

chore(deps)(deps): bump zip from 2.4.2 to 8.6.0

doublegate/Rusty2600 #5

2.4.2 → 8.6.0 Major PR

Open 24 days ago 1 comment

build(deps): bump the rust-all group across 1 directory with 29 updates

CitizenGardens/RAIN #62

8.3.1 → 8.6.0 Minor PR

Open 25 days ago 2 comments

Bump zip from 2.4.2 to 8.6.0 in /src-tauri

Crssz/llllllllammmmmmaaaaaaui #21

2.4.2 → 8.6.0 Major PR

Closed 25 days ago 1 comment

chore(deps): bump the cargo-deps group across 1 directory with 42 updates

qinghua362330/cc-switch-company #7

2.4.2 → 4.6.1 Major PR

Closed 26 days ago 2 comments

build(deps): bump the crates group across 1 directory with 80 updates

ABI-ZTROS/ZTR_OS_SU_UI #10

8.2.0 → 8.6.0 Minor PR

Closed 27 days ago 1 comment

deps(deps): bump the cargo-major-bumps group across 1 directory with 19 updates

a7garden/oxi #25

2.4.2 → 8.6.0 Major PR

Open 29 days ago 2 comments

chore(deps): bump the cargo-deps group across 1 directory with 42 updates

sunfengsheng/cc-switch_suirenai #8

2.4.2 → 4.6.1 Major PR

Closed about 1 month ago 2 comments

chore(deps): bump the cargo group with 20 updates

everruns/everruns #2475

2.4.2 → 8.6.0 Major PR

Closed about 1 month ago 2 comments

build(deps): bump the rust-all group across 1 directory with 26 updates

topherchris420/james_library #351

8.3.1 → 8.6.0 Minor PR

Closed about 1 month ago 3 comments

chore(deps)(deps): bump zip from 2.4.2 to 3.0.0

SandboxServers/Cimmeria #593

2.4.2 → 3.0.0 Major PR

Open about 1 month ago 1 comment

chore(deps): bump the cargo-workspace group across 1 directory with 41 updates

UniClipboard/UniClipboard #1120

2.4.2 → 4.6.1 Major PR

Open about 1 month ago 2 comments

build(deps): bump the cargo-all group across 1 directory with 12 updates

andreb154/cairn #5

2.4.2 → 8.6.0 Major PR

Closed about 1 month ago 1 comment

build(deps): bump the rust group across 1 directory with 3 updates

EzyGang/actavoces #3

4.6.1 → 8.6.0 Major PR

Open about 2 months ago 1 comment

build(deps): bump the rust-all group with 24 updates

topherchris420/james_library #340

8.3.1 → 8.6.0 Minor PR

Open about 2 months ago 2 comments

chore(deps): bump zip from 0.6.6 to 7.2.0 in /src-tauri

cboyd0319/JobSentinel #299

0.6.6 → 7.2.0 Major PR

Closed about 2 months ago 1 comment

chore: bump the rust-production group with 8 updates

JackStar6677-1/Aurexalis #14

2.4.2 → 8.6.0 Major PR

Open about 2 months ago 1 comment

build(deps): bump the rust-all group across 1 directory with 23 updates

topherchris420/james_library #339

8.3.1 → 8.6.0 Minor PR

Open about 2 months ago 2 comments

chore(deps): bump zip from 4.6.1 to 8.6.0

tgies/uls #29

4.6.1 → 8.6.0 Major PR

Open about 2 months ago 1 comment

deps(deps): bump the cargo-major-bumps group with 15 updates

a7garden/oxi #17

2.4.2 → 8.6.0 Major PR

Open about 2 months ago 1 comment

Bump the all group across 1 directory with 78 updates

kazimkayhan/mudir #26

2.4.2 → 8.6.0 Major PR

Closed about 2 months ago 1 comment

chore(deps): bump the cargo-deps group across 1 directory with 39 updates

cp-yu/cc-switch-web #13

2.4.2 → 4.6.1 Major PR

Closed about 2 months ago 2 comments

chore(deps): bump zip from 2.4.2 to 4.6.1 in /src-tauri

WillSanCaZam/guitarhub #4

2.4.2 → 4.6.1 Major PR

Closed about 2 months ago 2 comments

build(deps): bump the rust-all group across 1 directory with 21 updates

topherchris420/james_library #337

8.3.1 → 8.6.0 Minor PR

Closed about 2 months ago 3 comments

build(deps): bump the rust-all group across 1 directory with 21 updates

topherchris420/james_library #334

8.3.1 → 8.6.0 Minor PR

Closed about 2 months ago 3 comments

chore(deps): bump zip from 2.4.2 to 4.6.1 in /src-tauri

thedavidweng/OpenLoop #35

2.4.2 → 4.6.1 Major PR

Closed about 2 months ago 4 comments

Bump the dependencies group across 1 directory with 66 updates

gustcol/rustfs-ha #15

8.1.0 → 8.5.1 Minor PR

Closed about 2 months ago 1 comment

build(deps): bump the dependencies group across 1 directory with 60 updates

houseme/rustfs #50

8.3.0 → 8.5.1 Minor PR

Closed about 2 months ago 1 comment

Bump the crates group across 1 directory with 38 updates

a460261925/KowSU-build #10

8.4.0 → 8.6.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the cargo-deps group across 1 directory with 37 updates

kaisalife/py_env_version_cc_swich #12

2.4.2 → 4.6.1 Major PR

Open about 2 months ago 1 comment

chore(deps): bump the cargo-deps group across 1 directory with 36 updates

cp-yu/cc-switch-web #12

2.4.2 → 4.6.1 Major PR

Open about 2 months ago 2 comments

build(deps): bump the rust-all group across 1 directory with 20 updates

CitizenGardens/RAIN #48

8.3.1 → 8.6.0 Minor PR

Open about 2 months ago 2 comments

chore(deps): bump the rust-dependencies group across 1 directory with 39 updates

iperka/paporg #84

2.4.2 → 4.6.1 Major PR

Open about 2 months ago 1 comment

deps: bump the rust-dependencies group across 1 directory with 33 updates

frogdb/frogdb #71

8.5.0 → 8.6.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the rust-all group across 1 directory with 23 updates

chuyl/zeroclaw #22

8.4.0 → 8.6.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the cargo-deps group across 1 directory with 36 updates

qiaosang00/cc-switch #8

2.4.2 → 4.6.1 Major PR

Closed 2 months ago 2 comments

chore(deps): bump the rust-minor group across 1 directory with 5 updates

via-balaena/CortenForge #257

8.4.0 → 8.6.0 Minor PR

Open 2 months ago 1 comment

chore(deps): bump the rust-all group across 1 directory with 20 updates

quant-speed/quantclaw #18

8.5.1 → 8.6.0 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the rust-production group with 6 updates

JackStar6677-1/Aurexalis #6

2.4.2 → 8.6.0 Major PR

Open 2 months ago 1 comment

chore(deps): bump the cargo-deps group across 1 directory with 34 updates

John-John1/cc-swits #9

2.4.2 → 4.6.1 Major PR

Open 2 months ago 1 comment

chore(deps): bump the cargo-deps group across 1 directory with 34 updates

cp-yu/cc-switch-web #10

2.4.2 → 4.6.1 Major PR

Closed 2 months ago 2 comments

build(deps): bump the rust-all group across 1 directory with 23 updates

foobarren/zeroclaw #16

8.1.0 → 8.6.0 Minor PR

Closed 2 months ago 2 comments

build(deps): bump the rust-all group across 1 directory with 17 updates

topherchris420/james_library #326

8.3.1 → 8.6.0 Minor PR

Open 2 months ago 3 comments

chore(deps): bump the all-deps group across 1 directory with 34 updates

planetaryescape/mxr #38

2.4.2 → 7.2.0 Major PR

Closed 2 months ago 3 comments

build(deps): bump the rust-dependencies group across 1 directory with 33 updates

NextStat/nextstat.io #35

2.4.2 → 8.6.0 Major PR

Closed 2 months ago 1 comment

build(deps): bump the rust-dependencies group across 1 directory with 70 updates

l11223/Spectre #32

7.2.0 → 8.6.0 Major PR

Closed 2 months ago 1 comment

chore(deps): bump the rust-dependencies group across 1 directory with 70 updates

LyraVoid/FolkPatch #141

7.2.0 → 8.6.0 Major PR

Closed 2 months ago 1 comment

Package Details

Name:	`zip`
Ecosystem:	cargo
PURL Type:	cargo
Package URL:	`pkg:cargo/zip`
JSON API:	View JSON

Security Advisories

1

Active advisories

HIGH 1

View All cargo Advisories

Package Information

Description:

Library to support the reading and writing of zip files.

Repository:	https://github.com/zip-rs/zip2
Latest Release:	`4.0.0` about 1 year ago
Dependent Repos:	10,046
Dependent Packages:	969
Downloads:	74,094,521
Ranking:	Top 0.2884% by dependent repos Top 0.3308% by downloads Top 0.0797% by dependent pkgs

PR Status

Open 1,031 (40.1%)

Merged 333 (12.9%)

Closed 1,048 (40.7%)

PR Types

Major 1,458 (56.6%)

Minor 799 (31.0%)

Patch 56 (2.2%)