{"action":"Upgrade unzip to 6.0-r7 or later.","affected":[{"fixed":"6.0-r7","introduced":"0"}],"component":"unzip","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.23","exploited":false,"fixed_versions":["6.0-r7"],"id":"tcs_01M5NB9393THT1VGDF3AF137NE","modified_at":"2026-09-21T06:17:52.476438171Z","published_at":"2019-07-04T13:15:10.750Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2019-13232","https://security.alpinelinux.org/vuln/CVE-2019-13232"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2019-13232#Alpine:v3.23/unzip","url":"https://osv.dev/vulnerability/ALPINE-CVE-2019-13232"}],"summary":"Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a \"better zip bomb\" issue."}