{"action":"Upgrade SharpZipLib to 1.0.0-rc1 or later.","affected":[{"fixed":"1.0.0-rc1","introduced":"0"}],"component":"SharpZipLib","cve_ids":["CVE-2018-1002208"],"ecosystem":"NuGet","epss":0.09884,"exploited":false,"fixed_versions":["1.0.0-rc1"],"ghsa_id":"GHSA-cqj4-m2pc-v9m5","id":"tcs_01M5N8K04H8PN0RA3TPAREMAVH","modified_at":"2026-07-08T05:56:34.770610139Z","published_at":"2022-05-13T01:35:03Z","references":["https://osv.dev/vulnerability/GHSA-cqj4-m2pc-v9m5","https://nvd.nist.gov/vuln/detail/CVE-2018-1002208","https://github.com/icsharpcode/SharpZipLib/issues/232","https://github.com/icsharpcode/SharpZipLib/wiki/Release-1.0","https://github.com/snyk/zip-slip-vulnerability","https://snyk.io/research/zip-slip-vulnerability","https://snyk.io/vuln/SNYK-DOTNET-SHARPZIPLIB-60247"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-cqj4-m2pc-v9m5","url":"https://osv.dev/vulnerability/GHSA-cqj4-m2pc-v9m5"}],"summary":"Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib"}