{"id":"RUSTSEC-2025-0172","title":"`zip-extract` is unmaintained; use the `zip >= 2.4.0` crate instead","summary":"`zip-extract` is unmaintained; use the `zip >= 2.4.0` crate instead","severity":"none","vendor":"zip-extract","product":"zip-extract","ecosystem":"rust","affected":["zip-extract >= 0.0.0-0"],"published":"2025-07-16","updated":"2026-08-31","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2025-0172","references":[{"url":"https://crates.io/crates/zip-extract"},{"url":"https://rustsec.org/advisories/RUSTSEC-2025-0172.html"},{"url":"https://github.com/MCOfficer/zip-extract/commit/2950ec98d33b6e752b4f0976d67d89feb6f4acde"}],"tags":["osv","rust"],"ingestedAt":"2026-08-31T19:30:40.137Z","slug":"RUSTSEC-2025-0172","body":"## Overview\n\nThe [`zip-extract`](https://crates.io/crates/zip-extract) crate has been\nexplicitly deprecated by its author on [Jul 16, 2025](https://github.com/MCOfficer/zip-extract/commit/2950ec98d33b6e752b4f0976d67d89feb6f4acde), and the repository\nwas archived on [Sep 8, 2025](https://github.com/MCOfficer/zip-extract).\n\nThe author added deprecation notices [README](https://github.com/MCOfficer/zip-extract/commit/2950ec98d33b6e752b4f0976d67d89feb6f4acde#diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5R1-R8)\nstating that the functionality is now available directly in the [`zip`](https://crates.io/crates/zip) crate\nvia [`ZipArchive::extract`](https://docs.rs/zip/8.6.0/zip/read/struct.ZipArchive.html#method.extract)\n(available since zip 0.6.0) and\n[`ZipArchive::extract_unwrapped_root_dir`](https://docs.rs/zip/8.6.0/zip/read/struct.ZipArchive.html#method.extract_unwrapped_root_dir)\n(available since zip 2.4.0).\n\nIf you are using [`zip-extract`](https://crates.io/crates/zip-extract), switch to the\n[`zip >= 2.4.0`](https://crates.io/crates/zip) crate and use the methods above instead.\n\n## Affected packages\n\n- `zip-extract >= 0.0.0-0`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}