{"action":"Upgrade unzip-stream to 0.3.2 or later.","affected":[{"fixed":"0.3.2","introduced":"0"}],"component":"unzip-stream","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.3.2"],"ghsa_id":"GHSA-6jrj-vc65-c983","id":"tcs_01M5KF7CHJE2BZZ7VR2464NTD7","modified_at":"2024-08-26T15:17:40Z","published_at":"2024-08-26T15:17:40Z","references":["https://osv.dev/vulnerability/GHSA-6jrj-vc65-c983","https://github.com/mhr3/unzip-stream/security/advisories/GHSA-6jrj-vc65-c983","https://github.com/mhr3/unzip-stream/commit/ab67989719abb4dcc774d02de266151905b8d45a","https://github.com/mhr3/unzip-stream","https://github.com/mhr3/unzip-stream/compare/v0.3.1...v0.3.2","https://snyk.io/research/zip-slip-vulnerability"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-6jrj-vc65-c983","url":"https://osv.dev/vulnerability/GHSA-6jrj-vc65-c983"}],"summary":"unzip-stream allows Arbitrary File Write via artifact extraction"}