RUSTSEC-2026-0296None▾ Sunlit`unzip` is unmaintained
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
The unzip crate has only ever released a single
version, 0.1.0 (published 2017-12-23), and has seen no further activity. It
appears to be unmaintained, and its known path-traversal ("zip-slip")
vulnerability will not be fixed.
Consider migrating to an actively maintained alternative such as zip.
unzip >= 0.0.0-0Refer to the advisory for the patched release.
Connected by shared product, vendor, weakness, or advisory.