ZipSlip

Zip might allow directory traversal when extracting an archive containing relative path (s.a. ../../../../foo/bar) or symlinks (s.a. index.txt -> ../../../index.php).

Reference

• https://snyk.io/research/zip-slip-vulnerability
• https://www.youtube.com/watch?v=Ry_yb5Oipq0