| Package | Affected versions | Patched versions |
|---|---|---|
| minizip-ng | ≤ 1.1-4 |
Directory traversal vulnerability in the do_extract_currentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free