[SECURITY][HOTFIX] Fixes GHSA-4hh3-vj32-gr6j

MobSF / Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

https://opensecurity.in

GNU General Public License v3.0

17.49k stars 3.24k forks source link

[SECURITY][HOTFIX] Fixes GHSA-4hh3-vj32-gr6j #2421

Closed ajinabraham closed 3 months ago

ajinabraham commented 3 months ago

Describe the Pull Request

Fixes a zip slip vulnerability in MobSF <= 4.0.6

Checklist for PR

[x] Run MobSF unit tests and lint tox -e lint,test
[x] Tested Working on Linux, Mac, Windows, and Docker
[ ] Add unit test for any new Web API (Refer: StaticAnalyzer/tests.py)
[x] Make sure tests are passing on your PR

Additional Comments (if any)

DESCRIBE HERE

github-actions[bot] commented 3 months ago

👋 @ajinabraham Thank you for sending this pull request ❤️. Please make sure you have followed our contribution guidelines. We will review it as soon as possible