Go standard library Archive/zip vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Go standard library Archive/zip: 1 record(s), with affected versions and fixes.

CVE-2025-61728 Medium · 6.5 CWE-770 Jan 28, 2026

Excessive CPU consumption when building archive index in archive/zip

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.