Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-32840
7.3
HIGHCVSS v3
Published
January 26, 2022
CVSS v2
7.5 HIGH
Affected
2 projects
Assigned by
GitHub
Severity scale
010
Description
SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry `../evil.txt` may be extracted in the parent directory of `destFolder`. This leads to arbitrary file write that may lead to code execution. The vulnerability was patched in version 1.3.3.
icsharpcode/SharpZipLib
GitHub#ziplib is a Zip, GZip, Tar and BZip2 library written entirely in C# for the .NET platform.
GitHub#ziplib is a Zip, GZip, Tar and BZip2 library written entirely in C# for the .NET platform.< 1.3.3NVD
SharpZipLib
NuGet GallerySharpZipLib (#ziplib, formerly NZipLib) is a compression library for Zip, GZip, BZip2, and Tar written entirely in C# for .NET. It is implemented as an assembly (installable in the GAC), and thus can easily be incorporated into other projects (in any .NET language)
NuGet GallerySharpZipLib (#ziplib, formerly NZipLib) is a compression library for Zip, GZip, BZip2, and Tar written entirely in C# for .NET. It is implemented as an assembly (installable in the GAC), and thus can easily be incorporated into other projects (in any .NET language)< 1.3.3NVD