medium6.5
CVE-2025-61728
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened.
Impact
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Golang | Go | before 1.24.12 from 1.25.0 before 1.25.6 |