CVE-2023-39137: Archive Project Archive

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing.

Affected products

• Archive Project Archive: version 3.3.7 only

Published 2023-08-30. Last modified 2026-06-17.