{"action":"Upgrade adm-zip to 0.4.11 or later.","affected":[{"fixed":"0.4.11","introduced":"0"}],"component":"adm-zip","cve_ids":["CVE-2018-1002204"],"ecosystem":"npm","epss":0.13454,"exploited":false,"fixed_versions":["0.4.11"],"ghsa_id":"GHSA-3v6h-hqm4-2rg6","id":"tcs_01M5KEY9XEX56F9XPCKWHK6MSR","modified_at":"2023-11-08T03:59:42.410281Z","published_at":"2018-07-27T17:07:14Z","references":["https://osv.dev/vulnerability/GHSA-3v6h-hqm4-2rg6","https://nvd.nist.gov/vuln/detail/CVE-2018-1002204","https://github.com/cthackers/adm-zip/pull/212","https://github.com/cthackers/adm-zip/commit/62f64004fefb894c523a7143e8a88ebe6c84df25","https://hackerone.com/reports/362118","https://github.com/advisories/GHSA-3v6h-hqm4-2rg6","https://github.com/snyk/zip-slip-vulnerability","https://snyk.io/research/zip-slip-vulnerability","https://snyk.io/vuln/npm:adm-zip:20180415","https://www.npmjs.com/advisories/681","https://www.npmjs.com/advisories/994","http://www.securityfocus.com/bid/107001"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-3v6h-hqm4-2rg6","url":"https://osv.dev/vulnerability/GHSA-3v6h-hqm4-2rg6"}],"summary":"Arbitrary File Write in adm-zip"}