Zip Path Traversal  |  Security  |  Android Developers

Zip Slip, Path Traversal Vulnerability during File Decompression - ASEC

Zip Slip, Path Traversal Vulnerability during File Decompression ASEC

Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip)

### Summary A path traversal vulnerability in pnpm's binary fetcher allows malicious packages to write files outside the intended extraction directory. The vulnerability has two attack vecto...

Secure coding technique: Default behavior of Zip libraries can lead to Remote Code Execution - Blog

This week we are going to talk about the default behavior of Zip libraries. If you are an application developer, it is very likely that you have used this before. Most resources that are downloaded over the internet are in zip format, this makes sense; compressed data is smaller, so it downloads faster and consumes less bandwidth.

How to Prevent Zip File Exploitation | CrowdStrike

This blog post explores how the zip file format can be exploited and shares the solution the CrowdStrike team came up with.

oss-security - Re: CVE request: io_uring zcrx freelist OOB write

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Strata — inside the archive

Google’s iron grip on Android: Controlling open source by any means necessary

From the archives: Android is open—except for all the good parts.

archive.today is directing a DDOS attack against my blog

Around January 11, 2026, archive.today (aka archive.is, archive.md, etc) started using its users as proxies to conduct a distributed denial of service (DDOS) attack against Gyrovague, my personal b…

APK (file format)

Android Package Kit (APK) is the file format that software for Android is distributed in. It is an extension of the ZIP file format. An APK file contains bitcode for Android's Dalvik Virtual machine, resources used by the program (such as images and sounds), and sometimes native executable code, usually for the ARM processor.

osvauld/osvauld

Fully open-source, end-to-end encrypted, peer-to-peer application suite.

Improve device security with Advanced Protection for Android - Android Help

When you turn on Advanced Protection, you get the strongest security and privacy features to protect you and your device against online attacks, harmful apps, and data risks. This feature offers seve

OpenZipkin · A distributed tracing system

Zipkin is a distributed tracing system. It helps gather timing data needed to troubleshoot latency problems in service architectures. Features include both the collection and lookup of this data.

Xcode - But... Where are our archives?

I've submitted three versions of my app onto the App Store using the Build and Archive commands. But... Where are those archives? I've just learnt that I just need them to be able to read crashl...