{"action":"Upgrade decompress-zip to 0.2.2 or later.","affected":[{"fixed":"0.2.2","introduced":"0"},{"fixed":"0.3.2","introduced":"0.3.0"}],"component":"decompress-zip","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.2.2","0.3.2"],"ghsa_id":"GHSA-73v8-v6g4-vrpm","id":"tcs_01M5KF8NTZZ693HCG9QANT61NB","modified_at":"2020-08-31T18:35:21Z","published_at":"2020-09-02T15:58:13Z","references":["https://osv.dev/vulnerability/GHSA-73v8-v6g4-vrpm","https://github.com/nodejs/security-wg/blob/master/vuln/npm/488.json","https://snyk.io/research/zip-slip-vulnerability","https://www.npmjs.com/advisories/777"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-73v8-v6g4-vrpm","url":"https://osv.dev/vulnerability/GHSA-73v8-v6g4-vrpm"}],"summary":"Arbitrary File Overwrite in decompress-zip"}