https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-32841.htmlhttps://patchthecve.com/cve/CVE-2021-32841.htmlWed, 17 Jun 2026 03:53:44 +0000MEDIUM 4.0: SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.3.0 and prior to version 1.3.3, a check was added if the destination file is under destination directory. However, it is not enforced that `destDir` ends with slash. If the `destDir` is not slash terminated like `/homhttps://patchthecve.com/cve/CVE-2021-32842.htmlhttps://patchthecve.com/cve/CVE-2021-32842.htmlWed, 17 Jun 2026 03:53:44 +0000MEDIUM 4.0: SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.0.0 and prior to version 1.3.3, a check was added if the destination file is under a destination directory. However, it is not enforced that `_baseDirectory` ends with slash. If the _baseDirectory is not slash terminahttps://patchthecve.com/cve/CVE-2021-32840.htmlhttps://patchthecve.com/cve/CVE-2021-32840.htmlWed, 17 Jun 2026 03:53:44 +0000HIGH 7.3: SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry `../evil.txt` may be extracted in the parent directory of `destFolder`. This leads to arbitrary file write that may lead to code execution. The vulnerability was patched in version 1.3.3.