github.com/mholt/archiver vulnerabilities
CVEs whose affected-version data names the github.com/mholt/archiver package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-3445High· 8.1mholt/archiver Vulnerable to Path Traversal via Crafted ZIP File
mholt/archiver Vulnerable to Path Traversal via Crafted ZIP File
▾ Twilightmholt · github.com/mholt/archiverEPSS 0.50%via OSV
CVE-2018-1002207Medium· 5.5Arbitrary File Write via Archive Extraction in mholt/archiver
Arbitrary File Write via Archive Extraction in mholt/archiver
▾ Sunlitmholt · github.com/mholt/archiverEPSS 1.9%via OSV