CVE-2021-23484

CVE-2021-23484 is a critical Zip Slip vulnerability affecting the zip-local package prior to version 0.3.5. This flaw allows an attacker to achieve arbitrary file write by crafting a malicious archive that extracts files outside the intended directory. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and high potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit modules like Metasploit or Nuclei, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.