Name of the Vulnerable Software and Affected Versions decompress-zip versions 0.2.x through 0.2.1 decompress-zip versions 0.3.x through 0.3.1

Description The issue is an arbitrary file write vulnerability, known as Zip-Slip, which occurs because decompress-zip does not verify that extracted files do not resolve to targets outside of the extraction root directory.

Recommendations For decompress-zip versions 0.2.x, upgrade to 0.2.2 or later. For decompress-zip versions 0.3.x, upgrade to 0.3.2 or later.