codeql
codeql copied to clipboard
Python: Add modelling for `zstd.compression`
See https://docs.python.org/3/library/compression.zstd.html for information about this library.
As far as I can tell, the zstd library is not vulnerable to things like ZipSlip, but it could be vulnerable to a decompression bomb attack, so I extended those models accordingly.