9.3
Critical
CVE-2025-0851 A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad…
Description
A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DeepJavaLibrary 0.1 | 0.1.0 → < 0.31.1 | 0.31.1 |