`zip`

Ecosystem:
cargo

Package URL:
pkg:cargo/zip

Total PRs:
2,191 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
453 repositories

Unique Repos (30 days):
72 repositories

Security Advisories

zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write

GHSA-94vh-gphv-8pm8 CVE-2025-29787 HIGH published 11 months ago • updated 9 days ago

### Summary In the archive extraction routine of affected versions of the `zip` crate, symbolic links earlier in the archive are allowed to be us...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump zip from 1.1.3 to 1.1.4

luxtorpeda-dev/luxtorpeda #522

1.1.3 → 1.1.4 Patch PR

Open 5 months ago

build(deps): bump zip from 5.1.0 to 5.1.1

kellnr/kellnr #803

5.1.0 → 5.1.1 Patch PR

Merged 5 months ago

build(deps): bump zip from 5.1.0 to 5.1.1

libbpf/blazesym #1292

5.1.0 → 5.1.1 Patch PR

Merged 5 months ago

Bump zip from 5.1.0 to 5.1.1

ArdentEmpiricist/text_analysis #71

5.1.0 → 5.1.1 Patch PR

Open 5 months ago

chore(deps): bump zip from 5.1.0 to 5.1.1

markusstoller/cbm-parser #12

5.1.0 → 5.1.1 Patch PR

Merged 5 months ago

build(deps): bump zip from 5.1.0 to 5.1.1

xsy420/project-setup #138

5.1.0 → 5.1.1 Patch PR

Merged 5 months ago

internal: bump zip from 5.1.0 to 5.1.1

wgsl-analyzer/wgsl-analyzer #542

5.1.0 → 5.1.1 Patch PR

Merged 5 months ago

build(deps): bump zip from 5.1.0 to 5.1.1

shadow3aaa/fas-rs #270

5.1.0 → 5.1.1 Patch PR

Merged 5 months ago

Bump zip from 5.1.0 to 5.1.1

dlunch/wie #981

5.1.0 → 5.1.1 Patch PR

Open 5 months ago

chore(deps): Bump zip from 5.1.0 to 5.1.1

malwaredb/malwaredb-rs #857

5.1.0 → 5.1.1 Patch PR

Merged 5 months ago

build(deps): bump zip from 5.1.0 to 5.1.1

Jisu-Woniu/yarusto #157

5.1.0 → 5.1.1 Patch PR

Merged 5 months ago

Bump zip from 5.1.0 to 5.1.1

Esgrove/bandcamp-dl #146

5.1.0 → 5.1.1 Patch PR

Merged 5 months ago

chore(deps): bump zip from 5.1.0 to 5.1.1

open-telemetry/weaver #932

5.1.0 → 5.1.1 Patch PR

Open 5 months ago

chore(deps): Bump zip from 5.1.0 to 5.1.1

veryl-lang/verylup #201

5.1.0 → 5.1.1 Patch PR

Merged 5 months ago

Bump zip from 5.0.0 to 5.0.1

dlunch/RustJava #127

5.0.0 → 5.0.1 Patch PR

Closed 5 months ago 1 comment

Bump zip from 5.0.0 to 5.0.1

mpsoftwarefoundation/GeorgeLanguage #19

5.0.0 → 5.0.1 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump zip from 5.0.0 to 5.0.1

linw1995/bearmark #162

5.0.0 → 5.0.1 Patch PR

Open 5 months ago

Bump zip from 5.0.0 to 5.0.1 in the zip group

crust-gather/crust-gather #326

5.0.0 → 5.0.1 Patch PR

Merged 5 months ago

Bump zip from 5.0.0 to 5.0.1

tyrylu/feel-the-streets #726

5.0.0 → 5.0.1 Patch PR

Closed 5 months ago 1 comment

Bump zip from 5.0.0 to 5.0.1

ArdentEmpiricist/text_analysis #69

5.0.0 → 5.0.1 Patch PR

Open 5 months ago

chore(deps): bump zip from 5.0.0 to 5.0.1

markusstoller/cbm-parser #10

5.0.0 → 5.0.1 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump zip from 5.0.0 to 5.0.1

czerwonk/hakanai #53

5.0.0 → 5.0.1 Patch PR

Closed 5 months ago 1 comment

build(deps): bump zip from 5.0.0 to 5.0.1

shadow3aaa/fas-rs #268

5.0.0 → 5.0.1 Patch PR

Merged 5 months ago

Bump zip from 5.0.0 to 5.0.1

dlunch/wie #978

5.0.0 → 5.0.1 Patch PR

Merged 5 months ago

chore(deps): bump zip from 5.0.0 to 5.0.1

Thijzert123/packrinth #17

5.0.0 → 5.0.1 Patch PR

Open 5 months ago

chore(deps): bump zip from 4.6.0 to 4.6.1

apache/iggy #2164

4.6.0 → 4.6.1 Patch PR

Closed 5 months ago 3 comments

chore(deps): bump zip from 4.6.0 to 4.6.1

embroidery-space/embroiderly #285

4.6.0 → 4.6.1 Patch PR

Closed 5 months ago 1 comment

fix(deps): bump zip from 4.6.0 to 4.6.1

exograph/exograph #1770

4.6.0 → 4.6.1 Patch PR

Open 5 months ago

Bump zip from 4.6.0 to 4.6.1

tracel-ai/burn #3680

4.6.0 → 4.6.1 Patch PR

Closed 5 months ago

Bump zip from 4.6.0 to 4.6.1

dlunch/wie #970

4.6.0 → 4.6.1 Patch PR

Merged 5 months ago

chore(deps): bump zip from 4.6.0 to 4.6.1

czerwonk/hakanai #51

4.6.0 → 4.6.1 Patch PR

Open 5 months ago

dep-update: bump zip from 4.6.0 to 4.6.1

Unleash/unleash-edge #1145

4.6.0 → 4.6.1 Patch PR

Open 6 months ago

chore(deps): Bump zip from 4.6.0 to 4.6.1

malwaredb/malwaredb-rs #841

4.6.0 → 4.6.1 Patch PR

Open 6 months ago

build(deps): bump zip from 4.6.0 to 4.6.1

Jisu-Woniu/yarusto #153

4.6.0 → 4.6.1 Patch PR

Open 6 months ago

Bump zip from 4.6.0 to 4.6.1

dcchut/dcc-tiler #516

4.6.0 → 4.6.1 Patch PR

Merged 6 months ago

Bump zip from 4.6.0 to 4.6.1

mpsoftwarefoundation/GeorgeLanguage #16

4.6.0 → 4.6.1 Patch PR

Open 6 months ago 1 comment

chore(deps): Bump zip from 4.6.0 to 4.6.1

veryl-lang/verylup #193

4.6.0 → 4.6.1 Patch PR

Open 6 months ago

Bump zip from 4.6.0 to 4.6.1

dlunch/RustJava #124

4.6.0 → 4.6.1 Patch PR

Open 6 months ago

Bump zip from 4.6.0 to 4.6.1 in /rust

yutannihilation/ksj2gp #29

4.6.0 → 4.6.1 Patch PR

Merged 6 months ago

build(deps): bump zip from 4.6.0 to 4.6.1

libbpf/blazesym #1280

4.6.0 → 4.6.1 Patch PR

Open 6 months ago

Bump zip from 4.6.0 to 4.6.1 in the zip group

crust-gather/crust-gather #321

4.6.0 → 4.6.1 Patch PR

Open 6 months ago

Bump zip from 4.6.0 to 4.6.1

veryl-lang/discovery #176

4.6.0 → 4.6.1 Patch PR

Merged 6 months ago

Bump zip from 4.6.0 to 4.6.1

ArdentEmpiricist/text_analysis #64

4.6.0 → 4.6.1 Patch PR

Merged 6 months ago

chore(deps): bump zip from 4.6.0 to 4.6.1

cdklabs/cdk-from-cfn #1018

4.6.0 → 4.6.1 Patch PR

Open 6 months ago

build(deps): bump zip from 4.6.0 to 4.6.1

xsy420/project-setup #133

4.6.0 → 4.6.1 Patch PR

Merged 6 months ago

Bump the rust-dependencies group across 1 directory with 3 updates

reactive-graph/reactive-graph #485

4.6.0 → 4.6.1 Patch PR

Open 6 months ago

Bump the cargo group across 1 directory with 9 updates

EliahKagan/gitoxide #92

4.6.0 → 4.6.1 Patch PR

Open 6 months ago 2 comments

build(deps): bump zip from 2.2.2 to 2.2.3

SO-TS/but #43

2.2.2 → 2.2.3 Patch PR

Merged 12 months ago

build(deps): Bump the rust-dependencies group across 1 directory with 10 updates

vipyrsec/dragonfly-client-rs #173

2.2.1 → 2.2.3 Patch PR

Closed 12 months ago 2 comments

Package Details

Name:	`zip`
Ecosystem:	cargo
PURL Type:	cargo
Package URL:	`pkg:cargo/zip`
JSON API:	View JSON

Security Advisories

1

Active advisories

HIGH 1

View All cargo Advisories

Package Information

Description:

Library to support the reading and writing of zip files.

Repository:	https://github.com/zip-rs/zip2
Latest Release:	`4.0.0` 9 months ago
Dependent Repos:	10,046
Dependent Packages:	969
Downloads:	74,094,521
Ranking:	Top 0.2884% by dependent repos Top 0.3308% by downloads Top 0.0797% by dependent pkgs

PR Status

Open 885 (40.4%)

Merged 333 (15.2%)

Closed 811 (37.0%)

PR Types

Minor 630 (28.8%)

Major 1,267 (57.8%)

Patch 49 (2.2%)