CVE-2019-9195: Grin

Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days.

util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive.

Affected products

• Grin Grin: before 1.0.2 (fixed in 1.0.2)

Published 2019-02-26. Last modified 2026-06-17.