CVE-2024-48510: Dotnetzip.semverd Project Dotnetzip.semverd

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

• Dotnetzip.semverd Project Dotnetzip.semverd: from 1.10.1, up to and including 1.16.0
• Mihula Prodotnetzip: before 1.19.0 (fixed in 1.19.0)

Published 2024-11-13. Last modified 2026-06-17.