Executive brief
androidqf: Zip entry Name Injection in APK bundle (Zip Slip for zip consumers)
Affected products
- Go github.com/mvt-project/androidqf
Junglewise Threat Intelligence
androidqf: Zip entry Name Injection in APK bundle (Zip Slip for zip consumers)
Severity: medium · CVSS 4 · Published 2026-05-21
Technologies: github.com/mvt-project/androidqf (Go). Vendors: Go.
Related threats
- GO-2026-5464 - androidqf: Zip entry Name Injection in APK bundle (Zip Slip for zip consumers) in github.com/mvt-project/androidqf
- GO-2026-5206 - androidqf: APK download Path Traversal in device APK paths in github.com/mvt-project/androidqf
- mvt-project androidqf path traversal in APK acquisition
- androidqf: APK download Path Traversal in device APK paths
- mvt-project androidqf path traversal in APK zip generation