huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2022-44617: libXpm: Runaway loop on width of 0 and enormous height
Component: libXpm
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2023-01-17T00:00:00+00:00

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library.


Affected upstream versions: 3.5.15
Fixed upstream versions: libXpm-3.5.15
Upstream repository: https://gitlab.freedesktop.org/xorg/lib/libxpm
Upstream fix commit: f80fa6ae47ad4a5beacb28
CVE-2022-45442: sinatra: Reflected File Download attack
Component: sinatra
Severity: Moderate
CWE: CWE-494 (Download of Code Without Integrity Check)
CVSS v3: 8.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2022-11-28T00:00:00+00:00

A flaw was found in Sinatra, a domain-specific language for creating web applications in Ruby. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input.


Affected upstream versions: >= 3.0, < 3.0.4, >= 2.0, < 2.2.3
Fixed upstream versions: v3.0.4
Upstream repository: https://github.com/sinatra/sinatra
Upstream fix commit: ea8fc9495a350f7551b39e3025bfcd06f49f363b
CVE-2022-45869: kernel: KVM: x86/mmu: race condition in direct_page_fault()
Component: kernel
Severity: Moderate
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-11-23T00:00:00+00:00

A flaw was found in the Linux kernel in the KVM. A race condition in direct_page_fault allows guest OS users to cause a denial of service (host OS crash or host OS memory corruption) when nested virtualization and the TDP MMU are enabled.

Statement: The nested virtualization feature is not enabled by default up to Red Hat Enterprise Linux 8.4. Most importantly, Red Hat currently provides nested virtualization only as a Technology Preview and is therefore unsupported for production use. For additional details, please see https://access.redhat.com/solutions/21101 and https://access.redhat.com/support/offerings/techpreview.

Affected upstream versions: n/a
Fixed upstream versions: v6.1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 47b0c2e4c220f2251fd8dcfbb44479819c715e15
CVE-2022-45873: systemd: deadlock in systemd-coredump via a crash with a long backtrace
Component: systemd
Severity: Moderate
CWE: CWE-833 (Deadlock)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-10-18T00:00:00+00:00

A flaw was found in the systemd-coredump utility of systemd. When an application crashes, the systemd-coredump utility is called twice, once by the kernel and the second time in the systemd-coredump@.service to write the data, process, and save the core file. Communication between the programs is made through a pipe, and when there is too much data through a long backtrace or many linked libraries, the pipe blocks while waiting for the data, resulting in a timeout of the systemd-coredump@.service.

Statement: This vulnerability is only triggered when an application crashes and there is too much data about the crash that needs to be passed to the systemd-coredump utility, specifically more than 65536 bytes, and it will result in a Denial of Service. For this reason, this flaw has been rated as having a moderate security impact.

The systemd-coredump utility of systemd as shipped with Red Hat Enterprise Linux 8 does not use the inter-process communication related to this flaw. Therefore, it's not affected.

Affected upstream versions: n/a
Fixed upstream versions: v252
Upstream repository: https://github.com/systemd/systemd
Upstream fix commit: 076b807be472630692c5348c60d0c2b7b28ad437
CVE-2022-45884: kernel: use-after-free due to race condition occurring in dvb_register_device()
Component: kernel
Severity: Moderate
CWE: CWE-366 (Race Condition within a Thread)
CVSS v3: 6.4 (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-11-15T00:00:00+00:00

A race condition flaw leading to a use-after-free issue was found in the Linux kernel media subsystem in the DVB core device driver. It could occur in the dvb_register_device() function due to the file_operations structure (fops) being dynamically allocated and later kfreed. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

Statement: To exploit this vulnerability, an attacker must either have credentials for a vulnerable system and physical access to its ports, or they must have the elevated privileges necessary to control USB via sysfs. For that reason, Red Hat assesses the impact of this vulnerability as Moderate.

Affected upstream versions: n/a
Fixed upstream versions: v6.4
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 627bb528b086b4136315c25d6a447a98ea9448d3
CVE-2022-45886: kernel: use-after-free due to race condition occurring in dvb_net.c
Component: kernel
Severity: Moderate
CWE: CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-11-15T00:00:00+00:00

A race condition flaw leading to a use-after-free issue was found in the Linux kernel media subsystem in the dvb_net component of the DVB core device driver. It could occur between the time the device is disconnected (.disconnect function)  and the time the device node is opened (dvb_device_open function). A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

Statement: Because this vulnerability requires an attacker to either have physical access to a system with DVB hardware or requires a remote authenticated user to have knowledge about DVB hardware attached to the system and when it is disconnected and reconnected, Red Hat assesses the impact of this vulnerability as Moderate.

Affected upstream versions: n/a
Fixed upstream versions: v6.4
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 4172385b0c9ac366dcab78eda48c26814b87ed1a
CVE-2022-45887: kernel: memory leak in ttusb_dec_exit_dvb() in media/usb/ttusb-dec/ttusb_dec.c
Component: kernel
Severity: Moderate
CWE: CWE-401 (Missing Release of Memory after Effective Lifetime)
CVSS v3: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-11-15T00:00:00+00:00

A memory leak issue was found in the Linux kernel media subsystem in the TTUSB DEC driver. It could occur in the ttusb_dec_exit_dvb() function because of the lack of a dvb_frontend_detach call. A local user could trigger this flaw by repeatedly plugging and unplugging the device, potentially causing a denial of service condition.


Affected upstream versions: n/a
Fixed upstream versions: v6.4
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 517a281338322ff8293f988771c98aaa7205e457
CVE-2022-45919: kernel: use-after-free due to race condition occurring in dvb_ca_en50221.c
Component: kernel
Severity: Moderate
CWE: CWE-366 (Race Condition within a Thread)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-11-21T00:00:00+00:00

A race condition flaw leading to a use-after-free issue was found in the Linux kernel media subsystem in the DVB CA EN50221 interface of the DVB core device driver. It could occur in the dvb_ca_en50221_release() function if there is a disconnect after an open, because of the lack of a wait_event. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

Statement: Because this vulnerability requires an attacker to either have physical access to a system with DVB hardware or requires a remote authenticated user to have knowledge about DVB hardware attached to the system and when it is disconnected and reconnected, Red Hat assesses the impact of this vulnerability as Moderate.

Affected upstream versions: n/a
Fixed upstream versions: v6.4
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 280a8ab81733da8bc442253c700a52c4c0886ffd
CVE-2022-45934: kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c
Component: kernel
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-11-21T00:00:00+00:00

An integer overflow flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user generates malicious L2CAP_CONF_REQ packets. This flaw allows a local or bluetooth connection user to crash the system.

Statement: This issue is rated Moderate based on the known scenarios of attack that cause a denial of service.

Affected upstream versions: n/a
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git
Upstream fix commit: ae4569813a6e931258db627cdfe50dfb4f917d5d
CVE-2022-45939: emacs: ctags local command execution vulnerability
Component: emacs
Severity: Moderate
CWE: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2022-11-27T00:00:00+00:00

A flaw was found in Etags, the Ctags implementation of Emacs. A file with a crafted filename may result in arbitrary command execution when processed by Etags.

Statement: This vulnerability is only triggered when a local user runs etags with untrusted input, via a file with a crafted filename in the directory or set of files being processed by etags, for example. For this reason, this flaw has been rated with a moderate security impact.

Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/emacs.git
Upstream fix commit: d48bb4874bc6cd3e69c7a15fc3c91cc141025c51
CVE-2022-46146: exporter-toolkit: authentication bypass via cache poisoning
Component: exporter-toolkit
Severity: Moderate
CWE: CWE-305 (Authentication Bypass by Primary Weakness)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-11-29T00:00:00+00:00

A flaw was found in exporter-toolkit. A request can be forged by an attacker to poison the internal cache used to cache hashes and make subsequent successful requests. This cache is used to limit side channel attacks that could tell an attacker if a user is present in the file or not. Prometheus and its exporters can be secured by a web.yml file that specifies usernames and hashed passwords for basic authentication. Passwords are hashed with bcrypt, which means that even if you have access to the hash, it is very hard to find the original password. However, due to the way this mechanism was implemented in the exporter toolkit, if the hashed password is known, it is possible to authenticate against Prometheus.


Affected upstream versions: < 0.7.2, >= 0.8.0, < 0.8.2
Fixed upstream versions: v0.8.2
Upstream repository: https://github.com/prometheus/exporter-toolkit
Upstream fix commit: 5b1eab34484ddd353986bce736cd119d863e4ff5
CVE-2022-46149: capnproto: out of bounds read when handling a list of lists.
Component: capnproto
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 5.4 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)
Public date: 2022-11-30T00:00:00+00:00

A flaw was found in capnproto and capnp projects where a specially-crafted pointer could escape bounds checking by exploiting inconsistent handling of pointers when a list-of-structs is downgraded to a list-of-pointers.


Affected upstream versions: < 0.7.1, >= 0.8.0, < 0.8.1, >= 0.9.0, < 0.9.2, >= 0.10.0, < 0.10.3, >= 0.13.0, < 0.13.7, >= 0.14.0, < 0.14.11, >= 0.15.0, < 0.15.2
Fixed upstream versions: v1.0.0
Upstream repository: https://github.com/capnproto/capnproto
Upstream fix commit: 25d34c67863fd960af34fc4f82a7ca3362ee74b9
CVE-2022-46174: aws-efs-utils: Race condition during concurrent TLS mounts in efs-utils and aws-efs-csi-driver
Component: aws-efs-utils
Severity: Moderate
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 5.6 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Public date: 2022-12-28T00:00:00+00:00

A potential race condition issue exists within the Amazon EFS mount helper in efs-utils and aws-efs-csi-driver when using TLS to mount file systems. The mount helper allocates a local port for stunnel to receive NFS connections prior to applying the TLS tunnel. In affected versions, concurrent mount operations can allocate the same local port, leading to either failed mount operations or an inappropriate mapping from an EFS customer’s local mount points to that customer’s EFS file systems.


Affected upstream versions: < v1.34.4
Fixed upstream versions: v1.34.4
Upstream repository: https://github.com/aws/efs-utils
Upstream fix commit: f3a8f88167d55caa2f78aeb72d4dc1987a9ed62d
CVE-2022-46285: libXpm: Infinite loop on unclosed comments
Component: libXpm
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2023-01-17T00:00:00+00:00

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.


Affected upstream versions: 3.5.15
Fixed upstream versions: libXpm-3.5.15
Upstream repository: https://gitlab.freedesktop.org/xorg/lib/libxpm
Upstream fix commit: a3a7c6dcc3b629d7650148
CVE-2022-4645: libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c
Component: libtiff
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 5.6 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H)
Public date: 2023-03-01T00:00:00+00:00

A flaw was found in tiffcp, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the tiffcp function in tools/tiffcp.c, resulting in a denial of service and limited information disclosure.

Statement: libtiff is a general purpose library to manipulate TIFF images. The library itself is not used directly, it's used via another application linked with the library, which means this issue can only be triggered by an application processing untrusted images. Therefore, if there is no way an attacker can provide a crafted image to an application, it's likely not possible to exploit this CVE.

Affected upstream versions: <=4.4.0
Fixed upstream versions: v4.5.0
Upstream repository: https://gitlab.com/libtiff/libtiff
Upstream fix commit: e813112545942107551433d61afd16ac094ff246
CVE-2022-46663: less: crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal
Component: less
Severity: Moderate
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2023-02-07T00:00:00+00:00

A vulnerability was found in less. This flaw allows crafted data to result in "less -R" not filtering ANSI escape sequences sent to the terminal.


Affected upstream versions: n/a
Fixed upstream versions: v609
Upstream repository: https://github.com/gwsw/less
Upstream fix commit: a78e1351113cef564d790a730d657a321624d79c
CVE-2022-46751: apache-ivy: XML External Entity vulnerability
Component: apache-ivy
Severity: Moderate
CWE: CWE-611 (Improper Restriction of XML External Entity Reference)
CVSS v3: 8.2 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L)
Public date: 2023-08-20T00:00:00+00:00

Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2.

When Apache Ivy prior to 2.5.2 parses XML files - either its own configuration, Ivy files or Apache Maven POMs - it will allow downloading external document type definitions and expand any entity references contained therein when used.

This can be used to exfiltrate data, access resources only the machine running Ivy has access to or disturb the execution of Ivy in different ways.

Starting with Ivy 2.5.2 DTD processing is disabled by default except when parsing Maven POMs where the default is to allow DTD processing but only to include a DTD snippet shipping with Ivy that is needed to deal with existing Maven POMs that are not valid XML files but are nevertheless accepted by Maven. Access can be be made more lenient via newly introduced system properties where needed.

Users of Ivy prior to version 2.5.2 can use Java system properties to restrict processing of external DTDs, see the section about "JAXP Properties for External Access restrictions" inside Oracle's "Java API for XML Processing (JAXP) Security Guide".


Affected upstream versions: 1.0.0 <= 2.5.1
Upstream repository: https://gitbox.apache.org/repos/ant-ivy.git
Upstream fix commit: 2be17bc18b0e1d4123007d579e43ba1a4b6fab3d
CVE-2022-47015: mariadb: NULL pointer dereference in spider_db_mbase::print_warnings()
Component: mariadb
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-09-27T00:00:00+00:00

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer.


Affected upstream versions: n/a
Upstream repository: https://github.com/MariaDB/server
Upstream fix commit: be0a46b3d52b58956fd0d47d040b9f4514406954
CVE-2022-47024: vim: no check if the return value of XChangeGC() is NULL
Component: vim
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2023-01-20T00:00:00+00:00

A NULL pointer dereference issue was found in Vim's gui_x11_create_blank_mouse function in gui_x11.c. This flaw allows attackers to cause a denial of service and other unspecified impacts.


Affected upstream versions: n/a
Fixed upstream versions: v9.0.0339
Upstream repository: https://github.com/vim/vim
Upstream fix commit: a63ad78ed31e36dbdf3a9cd28071dcdbefce7d19
CVE-2022-4742: json-pointer: prototype pollution in json-pointer
Component: json-pointer
Severity: Moderate
CWE: CWE-1321 (Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'))
CVSS v3: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-12-26T00:00:00+00:00

A flaw was found in the json-pointer package. The affected versions of this package are vulnerable to prototype pollution vulnerability.

Statement: The json-pointer is a transitive dependency and is not used directly in any of the Red Hat products. Hence, the impact is set to Moderate.

Affected upstream versions: 0.6.0, 0.6.1
Upstream repository: https://github.com/manuelstofer/json-pointer
Upstream fix commit: 859c9984b6c407fc2d5a0a7e47c7274daa681941
CVE-2022-4744: kernel: tun: avoid double free in tun_free_netdev
Component: kernel
Severity: Important
CWE: CWE-1341 (Multiple Releases of Same Resource or Handle)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2023-03-20T10:00:00+00:00

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.

Statement: Keeping Red Hat Enterprise Linux version 8 with Moderate severity, because required patch 158b515f703e (see reference) missed. However, currently Red Hat Enterprise Linux version 8 not affected, because previous patch not backported too: 766b0515d5be ("net: make sure devices go through netdev_wait_all_refs"). Means that it is not possible to trigger the issue for the Red Hat Enterprise Linux 8, but potentially Red Hat Enterprise Linux version 8 could be vulnerable in future, so still need to fix. For the Red Hat Enterprise Linux version 9 there is known way to reproduce the issue.

Affected upstream versions: Linux kernel 5.16-rc7
Fixed upstream versions: v5.16
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git
Upstream fix commit: 158b515f703e
CVE-2022-47629: libksba: integer overflow to code execution
Component: libksba
Severity: Important
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 8.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Public date: 2022-10-17T00:00:00+00:00

A vulnerability was found in the Libksba library, due to an integer overflow within the CRL's signature parser. This issue can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.


Affected upstream versions: n/a
Upstream repository: https://git.gnupg.org/cgi-bin/libksba.git
Upstream fix commit: f61a5ea4e0f6a80fd4b28ef0174bee77793cf070
CVE-2022-47929: kernel: NULL pointer dereference in traffic control subsystem
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 4.2 (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H)
Public date: 2023-01-09T17:00:00+00:00

A NULL pointer dereference flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux kernel. This issue may allow a local unprivileged user to trigger a denial of service if the alloc_workqueue function return is not validated in time of failure, resulting in a system crash or leaked internal kernel information.


Affected upstream versions: n/a
Fixed upstream versions: v6.2
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 96398560f26aa07e8f2969d73c8197e6a6d10407
CVE-2022-48281: libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c
Component: libtiff
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2023-01-23T00:00:00+00:00

A vulnerability was found in libtiff. This vulnerability occurs due to an issue in processCropSelections in the tools/tiffcrop.c function in LibTIFF that has a heap-based buffer overflow (for example, "WRITE of size 307203") via a crafted TIFF image.


Affected upstream versions: n/a
Fixed upstream versions: v4.5.1
Upstream repository: https://gitlab.com/libtiff/libtiff
Upstream fix commit: d1b6b9c1b3cae2d9e37754506c1ad8f4f7b646b5
CVE-2022-48285: jszip: directory traversal via a crafted ZIP archive
Component: jszip
Severity: Moderate
CWE: CWE-23 (Relative Path Traversal)
CVSS v3: 7.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Public date: 2023-01-29T00:00:00+00:00

A flaw was found in the JSZip package. Affected versions of JSZip could allow a remote attacker to traverse directories on the system caused by the failure to sanitize filenames when files are loaded with `loadAsync`, which makes the library vulnerable to a Zip Slip attack. By extracting files from a specially crafted archive, an attacker could gain access to parts of the file system outside of the target folder, overwrite the executable files, and execute arbitrary commands on the system.


Affected upstream versions: n/a
Fixed upstream versions: v3.8.0
Upstream repository: https://github.com/Stuk/jszip
Upstream fix commit: 2edab366119c9ee948357c02f1206c28566cdf15