GitHub Dependabot flagged a high-severity vulnerability in adm-zip on the default branch (surfaced while pushing an unrelated fix for PR #2440).
Advisory: adm-zip: Crafted ZIP file triggers 4GB memory allocation
Severity: high
Alert: https://github.com/optave/ops-codegraph-tool/security/dependabot/1
Needs a dependency bump (or usage review if adm-zip parses untrusted ZIP input) to resolve.
GitHub Dependabot flagged a high-severity vulnerability in
adm-zipon the default branch (surfaced while pushing an unrelated fix for PR #2440).Advisory: adm-zip: Crafted ZIP file triggers 4GB memory allocation
Severity: high
Alert: https://github.com/optave/ops-codegraph-tool/security/dependabot/1
Needs a dependency bump (or usage review if
adm-zipparses untrusted ZIP input) to resolve.