CVE-2023-39138: Peakstep Zipfoundation

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip file.

Affected products

• Peakstep Zipfoundation: version 0.9.16 only

Published 2023-08-30. Last modified 2026-06-17.