zip-rs zip input validation error vulnerability

A security vulnerability exists in zip-rs versions from zip 0.6.0 up to but not including version 9.0.0. This vulnerability arises because the AES entry reader in src/aes.rs validates HMAC only when the data counter controlled by the attacker is set to zero. However, when the underlying bounded...