[Snyk] Upgrade adm-zip from 0.4.7 to 0.5.10 #3

nithishayadav · 2024-01-06T16:17:15Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade adm-zip from 0.4.7 to 0.5.10.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 18 versions ahead of your current version.
The recommended version was released a year ago, on 2022-12-20.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Directory Traversal SNYK-JS-ADMZIP-1065796	584/1000 Why? Has a fix available, CVSS 7.4	No Known Exploit
	Arbitrary File Write via Archive Extraction (Zip Slip) npm:adm-zip:20180415	584/1000 Why? Has a fix available, CVSS 7.4	Mature

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: adm-zip

0.5.10 - 2022-12-20
Add Unix mode attribute even when archive is created from Windows
Fixed an issue where addLocalFolderAsync causes stack overflow when a lot of files are filtered
Support to unzip symlinks
Fix parameter initialization bug of extractAllToAsync
Allow for custom stat or permissions value in addLocalFolder
Various small fixes and tests
0.5.9 - 2021-10-07
0.5.8 - 2021-10-07
0.5.7 - 2021-10-01
0.5.6 - 2021-09-12
No content.
0.5.5 - 2021-03-31
v0.5.5
0.5.4 - 2021-03-08
v0.5.4
0.5.3 - 2021-02-18
npm v0.5.3
0.5.2 - 2021-01-27
v0.5.1
0.5.1 - 2020-11-27
npm v0.5.1
0.5.0 - 2020-11-19
npm v0.5.0
0.4.16 - 2020-06-23
npm v0.4.16
0.4.14 - 2020-02-06
npm v0.4.14
0.4.13 - 2018-11-13
0.4.11 - 2018-05-12
0.4.10 - 2018-05-12
0.4.9 - 2018-04-25
0.4.8 - 2018-04-23
0.4.7 - 2015-02-09

from adm-zip GitHub release notes

Commit messages

Package name: adm-zip

9e52c3f Bump up package version
22f1f76 Merge pull request [Feature request] Page demo mode evolus/pencil#435 from cthackers/dependabot/npm_and_yarn/minimatch-3.1.2
690e4a2 Bump minimatch from 3.0.4 to 3.1.2
5f60b43 Merge pull request How do you merge cells ala HTML colspan attribute? evolus/pencil#434 from cthackers/dependabot/npm_and_yarn/nanoid-and-mocha-3.3.3
c535b0b Bump nanoid and mocha
05c25b1 Merge pull request File corrumped evolus/pencil#432 from cthackers/dependabot/npm_and_yarn/ansi-regex-3.0.1
c6023e7 Merge pull request [Feature Request] Master Pages evolus/pencil#400 from xfournet/fix-unix-mode
167108c Bump ansi-regex from 3.0.0 to 3.0.1
08826ca Merge pull request Use Gimp / Inskcape Palette evolus/pencil#430 from miserylee/master
4a47b85 Merge pull request [Feature Request] Ability to flip objects vertically and horizontally. evolus/pencil#401 from netlify-team-account-1/master
009ee26 Merge pull request Stencils Not Found in Repositories evolus/pencil#403 from robincodex/master
c334423 Merge pull request Different Fonts in UI evolus/pencil#404 from clavery/master
a558483 Merge pull request Sketchy Image Placeholder Entered Text Not Displayed evolus/pencil#415 from dilan-dio4/master
56c8bd4 Merge pull request Pencil v3 on openSUSE evolus/pencil#423 from nicholasruha/misspelled-constant
63cb149 fix the issue: addLocalFolderAsync causes stack overflow when a lot of files are filtered
1337fd9 Fixed spelling
f700a73 Passing attr to addLocalFolder
c75b5c5 fix undefined reference to Errors
28e460f Fix extractAllToAsync test
e5967bb Add test three parameters to extractAllToAsync
8e90db3 Fix parameter initialization bug of extractAllToAsync
d7a04fb add symlink repro
6287cea add Unix mode attribute even when archive is created from Windows ([Feature Request] Duplicate Objects evolus/pencil#399)
bebbabf Incremented version