[ https://issues.apache.org/jira/browse/FLINK-29122?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17826762#comment-17826762 ]
Robert Metzger commented on FLINK-29122: ---------------------------------------- Merged to master in https://github.com/apache/flink/commit/0da60ca1a4754f858cf7c52dd4f0c97ae0e1b0cb > Improve robustness of FileUtils.expandDirectory() > -------------------------------------------------- > > Key: FLINK-29122 > URL: https://issues.apache.org/jira/browse/FLINK-29122 > Project: Flink > Issue Type: Bug > Components: API / Core > Affects Versions: 1.16.0, 1.17.0 > Reporter: Robert Metzger > Assignee: Anupam Aggarwal > Priority: Major > Labels: pull-request-available > Fix For: 1.20.0 > > > `FileUtils.expandDirectory()` can potentially write to invalid locations if > the zip file is invalid (contains entry names with ../). -- This message was sent by Atlassian Jira (v8.20.10#820010)