{"action":"Upgrade unzipper to 0.8.13 or later.","affected":[{"fixed":"0.8.13","introduced":"0"}],"component":"unzipper","cve_ids":["CVE-2018-1002203"],"ecosystem":"npm","epss":0.10553,"exploited":false,"fixed_versions":["0.8.13"],"ghsa_id":"GHSA-884w-698f-927f","id":"tcs_01M5KFC7KJNMJQFSXCPKRPEP3X","modified_at":"2023-11-08T03:59:42.346154Z","published_at":"2018-07-27T17:06:50Z","references":["https://osv.dev/vulnerability/GHSA-884w-698f-927f","https://nvd.nist.gov/vuln/detail/CVE-2018-1002203","https://github.com/ZJONSSON/node-unzipper/pull/59","https://github.com/ZJONSSON/node-unzipper/commit/2220ddd5b58f6252069a4f99f9475441ad0b50cd","https://hackerone.com/reports/362119","https://github.com/advisories/GHSA-884w-698f-927f","https://github.com/snyk/zip-slip-vulnerability","https://snyk.io/research/zip-slip-vulnerability","https://snyk.io/vuln/npm:unzipper:20180415","https://www.npmjs.com/advisories/680"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-884w-698f-927f","url":"https://osv.dev/vulnerability/GHSA-884w-698f-927f"}],"summary":"Arbitrary File Write via Archive Extraction in unzipper"}