Current structure is prone to zip slip / zip bomb attack. Bomb structure must be checked before extraction, and elements under tarball/zip file must be checked if it includes any path traversal attack.
Vegetating Openaccess No-man's-land. DMRG standard issue e-Print archive.
Zip slip / zip bomb immunity #2
open
opened by
0xlet0.dmrg.yokohama