Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
cleanstart zziplib can let attackers read any file
published 4 days ago
Summary
The Zziplib library (cleanstart/zziplib) that handles zip archives can be tricked into accessing files outside the intended folder. An attacker could include a specially crafted archive to read or alter files on your system, potentially exposing confidential information. Upgrade to the latest version of Zziplib or stop using this library until a fix is applied.
What to do
- Update cleanstart zziplib to version 0.13.69-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | zziplib |
< 0.13.69-r2 Fix: upgrade to 0.13.69-r2
|
Original advisory text
Directory traversal vulnerability in ZZIPlib 0
Security vulnerability affects the zziplib package. Directory traversal vulnerability in ZZIPlib 0.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2025-WF63180 · OSV
Track software like this
Free during beta