—

RUSTSEC-2026-0296

`unzip` is unmaintained

Details

The [unzip](https://crates.io/crates/unzip) crate has only ever released a single version, `0.1.0` (published 2017-12-23), and has seen no further activity. It appears to be unmaintained, and its known path-traversal ("zip-slip") vulnerability will not be fixed.

Consider migrating to an actively maintained alternative such as [zip](https://crates.io/crates/zip).

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/unzip

Introduced in: 0.0.0-0

No fixed version published yet for unzip. Pin to a known-safe version or switch to an alternative.

References

https://crates.io/crates/unzip[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2026-0296.html[ADVISORY]
https://crates.io/crates/unzip[PACKAGE]