The Dotnetzip.Semverd Project develops a focused .NET compression library whose vulnerability profile centers on path-traversal weaknesses in archive extraction, a recurrent concern for file-handling components. Treat this as a compact vendor profile; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Dotnetzip.Semverd Project over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-48510CRITICAL Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: Thi | Nov 13, 2024 | 9.8 | 31 | NO | NO |
CVE-2018-1002205MEDIUM DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is misha | Jul 25, 2018 | 5.5 | 24 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Dotnetzip.Semverd Project.
Media articles that mention a CVE ID that affects a product developed by Dotnetzip.Semverd Project — matched by CVE ID, not by vendor name.