| Release | Version |
|---|---|
| bullseye | 2.0.1+ds-1 |
| bookworm | 2.0.1+ds-4 |
| trixie | 2.0.1+ds-4 |
| forky | 2.0.1+ds-4 |
| sid | 2.0.1+ds-4 |
| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|---|
| CVE-2026-56876 | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | extract-zip does not validate symlink targets when extracting zip arch ... |