zksync-era icon indicating copy to clipboard operation
zksync-era copied to clipboard

fix: security vulnerability in adm-zip package

Open tardigrade34 opened this issue 9 months ago • 0 comments

What ❔

This commit updates the adm-zip package to version 0.5.2 to fix a security vulnerability related to directory traversal.

Why ❔

These changes are implemented to address a security vulnerability in the adm-zip package, specifically targeting directory traversal. By upgrading to the latest version, we ensure the integrity and security of our codebase, mitigating potential risks associated with the exploit.

Checklist

  • [x] PR title corresponds to the body of PR (we generate changelog entries from PRs).
  • [x] Tests for the changes have been added/updated.
  • [x] Documentation comments have been added/updated.
  • [x] Code has been formatted via zk fmt and zk lint.
  • [x] Spellcheck has been run via zk spellcheck.
  • [x] Linkcheck has been run via zk linkcheck.

tardigrade34 avatar Apr 30 '24 02:04 tardigrade34