Description
A patch for quazip vulnerability (CVE-2018-1002209) was released on June 13, 2018, but thunder did not take advantage of the patch.
vulnerability link：https://nvd.nist.gov/vuln/detail/CVE-2018-1002209
path link：stachenov/quazip@5d2fc16
Steps to Reproduce
Description
A patch for quazip vulnerability (CVE-2018-1002209) was released on June 13, 2018, but thunder did not take advantage of the patch.
vulnerability link：https://nvd.nist.gov/vuln/detail/CVE-2018-1002209
path link：stachenov/quazip@5d2fc16
Steps to Reproduce