mirror of
https://github.com/github/codeql.git
synced 2026-04-26 01:05:15 +02:00
ad68a5e4e9
See https://docs.python.org/3/library/compression.zstd.html for information about this library. As far as I can tell, the `zstd` library is not vulnerable to things like ZipSlip, but it _could_ be vulnerable to a decompression bomb attack, so I extended those models accordingly.