Skip to content

[GHSA-vwc7-r8mq-g2x9] adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite - #9606

Open
mdaniels5757 wants to merge 1 commit into
github:mdaniels5757/advisory-improvement-9606from
mdaniels5757:GHSA-vwc7-r8mq-g2x9
Open

mdaniels5757 wants to merge 1 commit into
github:mdaniels5757/advisory-improvement-9606from
mdaniels5757:GHSA-vwc7-r8mq-g2x9

Commits

Commits on Sep 18, 2026