github.com/mholt/archiver/v3 (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package github.com/mholt/archiver/v3, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2025-3445 — CVSS 8.1 (high): A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file…
• CVE-2024-0406 — CVSS 6.1 (medium): A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when…