high7.3
CVE-2021-23391
Calipso Arbitrary File Write via Archive Extraction (Zip Slip)
Impact
This affects all versions of package calipso. It is possible for a malicious module to overwrite files on an arbitrary file system through the module install functionality.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | calipso | <= 0.3.54 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Calipso Project | Calipso | All versions |