CVE-2021-32840

CVE-2021-32840 is a critical directory traversal vulnerability in SharpZipLib (or #ziplib) versions prior to 1.3.3, allowing an attacker to write arbitrary files outside the intended extraction directory. This flaw, rated 9.8 CVSS (Critical), can lead to remote code execution due to an attacker crafting a malicious TAR file with entries like "../evil.txt". While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation. Organizations using affected SharpZipLib versions should upgrade to 1.3.3 or later immediately.