Mirth Connect
  1. Mirth Connect
  2. MIRTH-4288

Update zip4j and address ZIP extraction code

    Details

    • Type: Task Task
    • Status: Closed
    • Priority: Minor Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.7.0, 3.6.1
    • Component/s: Server
    • Labels:
      None

      Description

      https://github.com/snyk/zip-slip-vulnerability

      Determine which libraries or other code may be affected, for example zip4j.

        Activity

        Hide
        Nick Rupley added a comment -

        Zip4j has been updated/fixed, and any other affected areas have been fixed so they're not vulnerable.

        Show
        Nick Rupley added a comment - Zip4j has been updated/fixed, and any other affected areas have been fixed so they're not vulnerable.

          People

          • Assignee:
            Nick Rupley
            Reporter:
            Nick Rupley
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development