Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 17:07:55 +0000 RUSTSEC-2026-0369 — ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the targ… https://db.gcve.eu/vuln/rustsec-2026-0369 <p><strong>Affected:</strong> crates.io: zip</p> <p>`ZipStreamReader::extract()` applies Unix permissions through extracted symlinks without validating the symlink target stays within the destination</p> <p>For further details see: https://github.com/zip-rs/zip2/security/advisories/GHSA-4684-h2q9-2vcp</p> <p><strong>Affected:</strong> crates.io: zip</p> <p>`ZipStreamReader::extract()` applies Unix permissions through extracted symlinks without validating the symlink target stays within the destination</p> <p>For further details see: https://github.com/zip-rs/zip2/security/advisories/GHSA-4684-h2q9-2vcp</p> https://db.gcve.eu/vuln/rustsec-2026-0369