RUSTSEC-2025-0172
`zip-extract` is unmaintained; use the `zip >= 2.4.0` crate instead
The zip-extract crate has been
explicitly deprecated by its author on Jul 16, 2025, and the repository
was archived on Sep 8, 2025.
The author added deprecation notices README
stating that the functionality is now available directly in the zip crate
via ZipArchive::extract
(available since zip 0.6.0) and
ZipArchive::extract_unwrapped_root_dir
(available since zip 2.4.0).
If you are using zip-extract, switch to the
zip >= 2.4.0 crate and use the methods above instead.
What each source reports
OSV No score
`zip-extract` is unmaintained; use the `zip >= 2.4.0` crate instead
The zip-extract crate has been
explicitly deprecated by its author on Jul 16, 2025, and the repository
was archived on Sep 8, 2025.
The author added deprecation notices README
stating that the functionality is now available directly in the zip crate
via ZipArchive::extract
(available since zip 0.6.0) and
ZipArchive::extract_unwrapped_root_dir
(available since zip 2.4.0).
If you are using zip-extract, switch to the
zip >= 2.4.0 crate and use the methods above instead.
- Record
RUSTSEC-2025-0172- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
zip-extractcrates.io |
0.0.0-0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2025-0172 is a vulnerability with no CVSS score yet in zip-extract, published July 16, 2025. No source lists public exploit code. No source names a fixed version.