{"source":1193685,"name":"extract-zip","dependency":"extract-zip","title":"extract-zip allows arbitrary file writes through symlink archive entries","url":"https://github.com/advisories/GHSA-7pqw-9j4j-h8q3","severity":"high","versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.1.0","1.1.1","1.1.2","1.2.0","1.3.0","1.4.0","1.4.1","1.5.0","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.7.0","2.0.0","2.0.1"],"vulnerableVersions":["1.0.0","1.0.1","1.0.2","1.0.3","1.1.0","1.1.1","1.1.2","1.2.0","1.3.0","1.4.0","1.4.1","1.5.0","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.7.0","2.0.0","2.0.1"],"cwe":["CWE-22"],"cvss":{"score":8.1,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H"},"range":"<=2.0.1","id":"5PFZQI8MKk12bR/YK/ZVnUmDiH8J19S/dbxvcq6MnKcd40s7jQdQeJZjIR3e3QxohW1CAyHmvPolG6tuD2vnrA=="}