RustSeverity: MediumStatus: Published

zip: AES HMAC verification skipped when the decompressor stops early

When reading an AES-encrypted entry, the HMAC authentication check ran only after the full stream was consumed. If the decompressor stopped early, the check was skipped, so an attacker could forge entry content that was accepted without knowing the password. Fixed in zip 9.0.1.