Skip to content

Vulnerabilities of Go standard library archive/zip

Is your version affected?

CVE Summary Score Published
CVE-2025-61728 archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is… 6.5 Medium Jan 28, 2026
CVE-2024-24789 The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip… 5.3 Medium Jun 5, 2024

Other Go standard library products