Original library has vulberablility CVE-2024-48510. There is a fork that fixing it:
But it's anyway is a fork of a fork of an original library and it's unclear whether it's maintained or not.
This repo is resurrection of original DotNetZip but it's unclear whether it has CVE-2024-48510 or not?