Topic: input-validation

• Safe archive extraction: path traversal in zip and tar

  Archive entries can carry names like ../../etc/passwd or absolute paths and symlinks; extract only after resolving each target path and checking it stays inside the destination, reject links pointing outside, and cap total size and entry count.

  article · en · unreviewed

Machine-readable: JSON