CVE-2024-0450 Quoted zip

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Affecting ZIP Archive Handling in Go Two vulnerabilities related to ZIP archive handling in Go have been reported. CVE-2021-41772, published on November 8, 2021, allows a panic via a crafted ZIP archive with an invalid name or empty filename field. CVE-2024-0450, published on March 19, 2024, involves issues with quoted ZIP files. 2 sources 41