Executive brief
`uncbv`: archive extraction is vulnerable to path traversal (zip-slip)
Affected products
- crates.io uncbv
Junglewise Threat Intelligence
Severity: low · CVSS 3.1 · Published 2026-09-23
Vendors: crates.io.
`uncbv`: archive extraction is vulnerable to path traversal (zip-slip)