Skip to content

Commit 1e761ac

Browse files
authored
deps: Update to zip 2.4.x
Due to GHSA-94vh-gphv-8pm8, the zip crate should be updated to 2.4.x immediately, to prevent specially-crafted templates from writing files outside the destination directory.
1 parent 68602bc commit 1e761ac

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Cargo.toml

+1-1
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ hex = "0.4"
1919
is_executable = "0.1"
2020
siphasher = "0.3"
2121
tar = "0.4"
22-
zip = "2.1.3"
22+
zip = "2.4"
2323

2424
[dev-dependencies]
2525
tempfile = "3.1"

0 commit comments

Comments
 (0)