Closed
Description
The JRE provisioning is vulnerable against zip bomb attacks in the ZipUnpacker and the TarGzUnpacker implementations.
For details see the security hotspot for rule S5042 in ZipUnpacker's use of zipArchive.ExtractToDirectory.
{{ message }}