loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive.
{ "binaries": [ { "binary_version": "3.1.4+dfsg-1", "binary_name": "node-jszip" } ] }
{ "binaries": [ { "binary_version": "3.2.2+dfsg-1", "binary_name": "node-jszip" } ] }
{ "binaries": [ { "binary_version": "3.7.1+dfsg-1", "binary_name": "node-jszip" } ] }
{ "binaries": [ { "binary_version": "3.10.1+dfsg-2", "binary_name": "node-jszip" } ] }