CVE-2018-1002204

CVE-2018-1002204 affects the adm-zip npm library prior to version 0.4.9. The vulnerability allows directory traversal during ZIP extraction via ../ path segments, enabling an attacker to write arbitrary files on the target system (Zip-Slip). Public references note the remediation: upgrade to 0.4....