CVE-2025-61728

CVE-2025-61728 is a denial-of-service vulnerability affecting golang go's archive/zip package, stemming from a super-linear file name indexing algorithm. This flaw can be triggered by processing a maliciously crafted ZIP archive, leading to a denial of service. With a CVSS score of 6.5 (MEDIUM), it requires user interaction (UI:R) but can be exploited remotely (AV:N) with low attack complexity (AC:L). There is currently no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB, though it has garnered some community discussion and media coverage.