The GitHub Actions job "CodeQL" on 
commons-compress.git/COMPRESS-725-safe-javadoc-example has failed.
Run started by GitHub user tanvir-ux (triggered by tanvir-ux).

Head commit for run:
c92a0866ca40d43723433000b38b720288cc98a7 / Md Tanvir Alam 
<[email protected]>
[COMPRESS-725] Use ArchiveEntry.resolveIn in decompress example

The class-level ZIP decompress Javadoc used Path.resolve(entry.getName()),
which is vulnerable to Zip Slip if copied as-is. Prefer ArchiveEntry.resolveIn
(available since 1.26.0), the same guard Expander uses.

Report URL: https://github.com/apache/commons-compress/actions/runs/33152375652

With regards,
GitHub Actions via GitBox

Reply via email to