Zip-local Project ≫ Zip-local

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

9.8

CVE-2021-23484

Exploit

EPSS 0.59%
Published 28.01.2022 22:15:09
Last modified 21.11.2024 05:51:47

The package zip-local before 0.3.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can lead to an extraction of a crafted file outside the intended extraction directory.