This repository has been archived by the owner on Jun 3, 2020. It is now read-only.

Handle ZipSlip vulnerability when processing ZipEntry names in a zip file #60

Open

bjhargrave opened this issue Mar 12, 2020 · 0 comments

Labels

Collaborator

bjhargrave commented Mar 12, 2020

See https://github.com/bndtools/bnd/blob/ea6b9b1d3e097a443d707a6623d8542044bf4c94/aQute.libg/src/aQute/lib/zip/ZipUtil.java#L29-L76 for a method to clean a zip entry name which fails upon a malformed zip entry name.

tbitonti added the enhancement label

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.