{"source":1139346,"name":"extract-zip","dependency":"extract-zip","title":"extract-zip unvalidated symlink path traversal","url":"https://github.com/advisories/GHSA-jmr9-qjv8-65gv","severity":"high","versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.1.0","1.1.1","1.1.2","1.2.0","1.3.0","1.4.0","1.4.1","1.5.0","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.7.0","2.0.0","2.0.1"],"vulnerableVersions":["1.0.0","1.0.1","1.0.2","1.0.3","1.1.0","1.1.1","1.1.2","1.2.0","1.3.0","1.4.0","1.4.1","1.5.0","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.7.0","2.0.0","2.0.1"],"cwe":["CWE-22"],"cvss":{"score":8.1,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"},"range":"<=2.0.1","id":"jSWTM56amLotlEyQMMBsw92Q/clAh5dhlOjtFhHsq98TlvN8hzenDvvOxc3tJgHR5Vqi7ZygoBhGke/CFd+aVg=="}