Back to search
CVE-2025-61728
Published: Jan 28, 2026
Modified: Jan 29, 2026
PUBLISHED
Description
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.
| Vendor | Product | Versions |
|---|---|---|
Go standard library | archive/zip | affected 0 - < 1.24.12affected 1.25.0 - < 1.25.6 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now