| Package | Affected versions | Patched versions |
|---|---|---|
| SharpZipLib | < 1.3.3 | 1.3.3 |
| sharpziplib | < 1.3.3 | 1.3.3 |
SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry ../evil.txt may be extracted in the parent directory of destFolder. This leads to arbitrary file write that may lead to code execution. The vulnerability was patched in version 1.3.3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free