Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-27114
7.5
HIGHCVSS v3
Published
February 19, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop in the ROMFS archive parser. Version 6.0.1630.0 patches the issue.
M2Team/NanaZip
GitHubThe 7-Zip derivative intended for the modern Windows experience
GitHubThe 7-Zip derivative intended for the modern Windows experience>= 5.0.1252.0, < 6.0.1630.0NVD