TI-2018-16133 CVE-2018-1002201 · GHSA-qcf3-9vmh-xw4rPath traversal in zeroturnaround zt-zipPriority LOW 38zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction.CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.10437 · Published 2018-07-25 · Partial fix · 1.13 CWE-22