[ 
https://issues.apache.org/jira/browse/TENTACLES-26?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18097028#comment-18097028
 ] 

ASF subversion and git services commented on TENTACLES-26:
----------------------------------------------------------

Commit 6a2335479ee32e3c7203c39c5b087ead71231527 in creadur-tentacles's branch 
refs/heads/feature/TENTACLES-26 from Philipp Ottlinger
[ https://gitbox.apache.org/repos/asf?p=creadur-tentacles.git;h=6a23354 ]

TENTACLES-26: Check for possible zip slip entries in Archive


> Fix possible ZIP slip vulnerability while handling archives
> -----------------------------------------------------------
>
>                 Key: TENTACLES-26
>                 URL: https://issues.apache.org/jira/browse/TENTACLES-26
>             Project: Apache Tentacles
>          Issue Type: Improvement
>    Affects Versions: 0.1
>            Reporter: Philipp Ottlinger
>            Assignee: Philipp Ottlinger
>            Priority: Major
>
> Sonar reports possible Zip Slip vulnerabilities in Tentacles:
> * FileSystem.java:77
> * IOSystem.java:110
> In the process of fixing this vulnerability:
> * Update to httpclient5 to fix CVE warnings



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to