Launchpad.net

CVE 2022-48285

loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive.

See the CVE page on Mitre.org for more details.