Unrated severityOSV Advisory· Published Jan 28, 2026· Updated Jan 29, 2026
Excessive CPU consumption when building archive index in archive/zip
CVE-2025-61728
Description
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.