Zip Slip vulnerability affect thousands of projects

On June 5th, Snyk’s researchers announced a vulnerability called Zip Slip. Through this vulnerability, an attacker can use a specially crafted ZIP archive to cover arbitrary files through path traversal, resulting in potential command execution. ...