Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-23484

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wxj7-97fp-j53j

Exposure of Resource to Wrong Sphere in Zip-Local The package zip-local before 0.3.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can lead to an extraction of a crafted file outside the intended extraction directory.

gitlab/npm/zip-local/CVE-2021-23484

Path traversal in Zip-Local The package zip-local is vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can lead to an extraction of a crafted file outside the intended extraction directory.