{"action":"Upgrade zip-local to 0.3.5 or later.","affected":[{"fixed":"0.3.5","introduced":"0"}],"component":"zip-local","cve_ids":["CVE-2021-23484"],"ecosystem":"npm","epss":0.0205,"exploited":false,"fixed_versions":["0.3.5"],"ghsa_id":"GHSA-wxj7-97fp-j53j","id":"tcs_01M5KGGBRP9EEECJ52F2ER73YP","modified_at":"2026-09-10T03:49:12.296259937Z","published_at":"2022-02-01T00:46:01Z","references":["https://osv.dev/vulnerability/GHSA-wxj7-97fp-j53j","https://nvd.nist.gov/vuln/detail/CVE-2021-23484","https://github.com/Mostafa-Samir/zip-local/commit/6bb9b59733df379ac168aa705790bd8339b4bf9b","https://github.com/Mostafa-Samir/zip-local/commit/949446a95a660c0752b1db0c654f0fd619ae6085","https://github.com/Mostafa-Samir/zip-local","https://github.com/Mostafa-Samir/zip-local/blob/master/main.js%23L365","https://snyk.io/vuln/SNYK-JS-ZIPLOCAL-2327477"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-wxj7-97fp-j53j","url":"https://osv.dev/vulnerability/GHSA-wxj7-97fp-j53j"}],"summary":"Exposure of Resource to Wrong Sphere in Zip-Local"}