{"source":1193734,"name":"adm-zip","dependency":"adm-zip","title":"adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite","url":"https://github.com/advisories/GHSA-vwc7-r8mq-g2x9","severity":"moderate","versions":["0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.1.8","0.1.9","0.2.0","0.2.1","0.4.3","0.4.4","0.4.5","0.4.6","0.4.7","0.4.8","0.4.9","0.4.10","0.4.11","0.4.13","0.4.14","0.4.16","0.5.0","0.5.1","0.5.2","0.5.3","0.5.4","0.5.5","0.5.6","0.5.7","0.5.8","0.5.9","0.5.10","0.5.11","0.5.12","0.5.13","0.5.14","0.5.15","0.5.16","0.5.17","0.5.18","0.6.0","0.6.1"],"vulnerableVersions":["0.5.9","0.5.10","0.5.11","0.5.12","0.5.13","0.5.14","0.5.15","0.5.16","0.5.17","0.5.18","0.6.0"],"cwe":["CWE-59"],"cvss":{"score":6.5,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N"},"range":">=0.5.9 <=0.6.0","id":"YZZ6KYkDWaR7adX/9Tx57vkiraha07F4j+3ZJGFfwwtCknQx+dYQXRS/VPuIogcP6OQUDi/waX457m1GQhet0g=="}