Wasmtime GitHub notifications bot (Oct 17 2026 at 00:13): Wasmtime GitHub notifications bot (Oct 17 2026 at 00:13):github-actions[bot] opened issue #14790:
ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target
Details Package zipVersion 0.6.6Date 2026-10-10 Patched versions >=9.0.0
ZipStreamReader::extract()applies Unix permissions through extracted symlinks without validating the symlink target stays within the destinationFor further details see: https://github.com/zip-rs/zip2/security/advisories/GHSA-4684-h2q9-2vcp
See advisory page for additional details.
Wasmtime GitHub notifications bot (Oct 17 2026 at 02:24):alexcrichton commented on issue #14790:
This dependency is used through
tchwhich is an optional dependency ofwasmtime-wasi-nn. Although our version oftchis pretty far behind the latest published one, even updating that still keepszipat today's dependency of 0.6.6. That means that as of this moment there's no way to update this dependency.That being said it's only a dependency of
wasmtime-wasi-nn, it's an optional dependency, and it's off-by-default. I don't know what it's usingzipfor, however. It's both a build and a runtime dependency, so I don't know the surface area there.
Last updated: Oct 31 2026 at 23:03 UTC