← All advisories

High severity7.8NVD Advisory· Published Aug 30, 2023· Updated Jun 17, 2026

CVE-2023-39139

CVE-2023-39139

Description

An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
archivePub	< 3.3.8	3.3.8

Affected products

3

Archive Project/Archive
cpe:2.3:a:archive_project:archive:3.3.7:*:*:*:*:*:*:*
Archive/Archivedescription
ghsa-coords
pkg:pub/archive
Range: < 3.3.8

Patches

Vulnerability mechanics

References

7

blog.ostorlab.co/zip-packages-exploitation.htmlnvdExploitWEB
ostorlab.co/vulndb/advisory/OVE-2023-5nvdExploitWEB
github.com/advisories/GHSA-9v85-q87q-g4vgghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-39139ghsaADVISORY
github.com/brendan-duncan/archive/commit/6de492385d72af044231c4163dff13a43d991c83ghsaWEB
github.com/brendan-duncan/archive/commit/edb0d480733a44d28ff3d5e4e2779153ba645ce7ghsaWEB
github.com/brendan-duncan/archive/issues/265nvdIssue TrackingWEB

News mentions

0

No linked articles in our index yet.