{"action":"Upgrade SharpCompress to 0.21.0 or later.","affected":[{"fixed":"0.21.0","introduced":"0"}],"component":"SharpCompress","cve_ids":["CVE-2018-1002206"],"ecosystem":"NuGet","epss":0.09332,"exploited":false,"fixed_versions":["0.21.0"],"ghsa_id":"GHSA-fxh6-w476-hgr4","id":"tcs_01M5N8NB0JCBJM22DJG9Y5V2YK","modified_at":"2026-09-10T03:48:44.565298860Z","published_at":"2019-09-11T22:59:57Z","references":["https://osv.dev/vulnerability/GHSA-fxh6-w476-hgr4","https://nvd.nist.gov/vuln/detail/CVE-2018-1002206","https://github.com/adamhathcock/sharpcompress/pull/374","https://github.com/adamhathcock/sharpcompress/commit/42b1205fb435de523e6ef8ac5b7bafbe712997f6","https://github.com/adamhathcock/sharpcompress/commit/80ceb1c375fdb1b4ffba16528c99089e804ce61f","https://github.com/snyk/zip-slip-vulnerability","https://snyk.io/research/zip-slip-vulnerability","https://snyk.io/vuln/SNYK-DOTNET-SHARPCOMPRESS-60246"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-fxh6-w476-hgr4","url":"https://osv.dev/vulnerability/GHSA-fxh6-w476-hgr4"}],"summary":"Directory Traversal in SharpCompress"}