Zip (< 9.0.0)

The zip Rust library is vulnerable to a denial-of-service condition where a malicious ZIP64 archive triggers an unrecoverable process abort through an impossible memory allocation request.

The Rust zip library is vulnerable to a denial-of-service condition where attacker-controlled ZIP64 uncompressed size headers trigger memory allocation panics during extraction, causing service termination.