Intel

AIKIDO-2026-751055

zip-extract is vulnerable to Use of Unmaintained Third Party Components

Use of Unmaintained Third Party Components Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published 2 days ago

50

Medium Risk

This Affects:

rustzip-extract
0.0.0 - *
Are you affected? Scan for Free

TL;DR

The zip-extract crate is no longer maintained. Please migrate to an alternative crate.

Who does this affect?

You are affected if you are using this package.

Background info

zip-extract is vulnerable to Use of Unmaintained Third Party Components in all versions.

How to fix this

Remove any zip-extract package from your application. Please take a look at zip as an alternative.

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform