php-archive vulnerabilities

CVEs whose affected-version data names the php-archive package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112302Medium· 6.3

yesterday

kiwilan php-archive Extraction ArchiveZip.php extract path traversal

A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file src/Readers/ArchiveZip.php of the component Extraction. This manipulation causes path traversal. The attack is …

▾ Sunlitkiwilan · php-archivevia CVEORG