Sharpziplib Project Sharpziplib — known CVE vulnerabilities

Every CVE whose affected-product data names Sharpziplib Project Sharpziplib, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-32840 — CVSS 7.3 (high): SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry `../evil.txt` may be extracted in…
• CVE-2018-1002208 — CVSS 5.5 (medium): SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash)…
• CVE-2021-32841 — CVSS 4.0 (medium): SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.3.0 and prior to version 1.3.3, a check was added if the…
• CVE-2021-32842 — CVSS 4.0 (medium): SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.0.0 and prior to version 1.3.3, a check was added if the…