loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-57076.json"