Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-01-28 | 1 | Disclosure1 |
| 2026-01-29 | 1 | Disclosure1 |
| 2026-02-23 | 1 | Patch1 |
🔍 Lambda Watchdog detected that CVE-2025-61728 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/397 #AWS #Lambda #Security #CVE #DevOps #SecOps
Post summary
AWS Lambda base images have been updated to remove CVE-2025-61728, indicating the vulnerability has been patched or otherwise mitigated.
CVE-2025-61728 Denial of Service via Malicious ZIP Archive in archive/zip Library https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-61728
Post summary
CVE-2025-61728 is a denial-of-service vulnerability in the archive/zip library triggered by malicious ZIP archives, as noted in a brief vulnerability listing.
CVE-2025-61728 archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when … https://www.cve.org/CVERecord?id=CVE-2025-61728
Post summary
CVE‑2025‑61728 is a denial‑of‑service vulnerability in zip archive processing triggered by a super‑linear filename indexing algorithm on first file open.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | golang | go | - | - | - |