Arbitrary File Write via Archive Extraction (Zip Slip)

Overview System.IO.Compression.ZipFile provides classes that support the compression and decompression of streams using file system paths. Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip. An attacker could write arbitrary files and...