Zsolt Imre

Given a path, e.g. `test/targetdir` or `./test/targetdir` to `directory()` somehow ends up trying to compress the entire filesystem. Please note, there were no symbolic links in `targetdir`. (Without having a...

Insecure Default Resolver Behavior

4

I have noticed that by default the library (tested with version `10.1.0`) is willing to resolve just any files pointed to by `$ref`. This can be a problem if the...

I have encountered an error while trying to brute-force an XLSX file. The msoffice plugin failed to extract the value of hashAlgorithm. This is because the end of the stream...

Added security guidance on how to use the library safely to prevent local file inclusion and potential sensitive information disclosure.

Buffer Overflow Vulnerability

2

I appreciate the author clearly stating that security was not really considered when writing the code. Still, it probably make sense for me to leave this issue here so that...

When calling the scrollTo method of the ScrollView with a number as the argument the state of the component updates, however the view itself does not re-render, thus the actual...