{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"1.10.1","last_affected":"1.16.0"}],"component":"DotNetZip","cve_ids":["CVE-2024-48510"],"ecosystem":"NuGet","epss":0.02018,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xhg6-9j5j-w4vf","id":"tcs_01M5N95HC83XFEWX63YPRWZ68J","modified_at":"2024-11-25T20:25:01.609089Z","published_at":"2024-11-13T15:31:37Z","references":["https://osv.dev/vulnerability/GHSA-xhg6-9j5j-w4vf","https://nvd.nist.gov/vuln/detail/CVE-2024-48510","https://github.com/mihula/ProDotNetZip/pull/21","https://github.com/mihula/ProDotNetZip/commit/18486ad6d13742a07a6755ef6edf60d7458f1854","https://gist.github.com/thomas-chauchefoin-bentley-systems/855218959116f870f08857cce2aec731","https://github.com/haf/DotNetZip.Semverd","https://github.com/haf/DotNetZip.Semverd/blob/e487179b33a9a0f2631eed5fb04d2c952ea5377a/src/Zip.Shared/ZipEntry.Extract.cs#L1365-L1410","https://www.nuget.org/packages/DotNetZip"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xhg6-9j5j-w4vf","url":"https://osv.dev/vulnerability/GHSA-xhg6-9j5j-w4vf"}],"summary":"DotNetZip Directory Traversal vulnerability"}