zip.vim

  1. CVE-2025-53906: Vim zip.vim Path Traversal and Azure Linux Attestation

    The Vim editor contains a path‑traversal flaw in its zip.vim plugin (CVE‑2025‑53906) that can let a specially crafted ZIP archive cause Vim to write files outside the intended directory — and while Microsoft has publicly attested that Azure Linux includes the vulnerable component, that...