| Package | Affected versions | Patched versions |
|---|---|---|
| ziparchive | ≤ 2.5.3 |
SSZipArchive versions 2.5.3 and older contain an arbitrary file write vulnerability due to lack of sanitization on paths which are symlinks. SSZipArchive will overwrite files on the filesystem when opening a malicious ZIP containing a symlink as the first item.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free