[Snyk] Upgrade adm-zip from 0.4.7 to 0.4.16

[snyk-bot]

Snyk has created this PR to upgrade adm-zip from 0.4.7 to 0.4.16.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 7 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2020-06-23.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Arbitrary File Write via Archive Extraction (Zip Slip) npm:adm-zip:20180415	Mature

Release notes

Package name: adm-zip

• 0.4.16 - 2020-06-23
• 0.4.14 - 2020-02-06
• 0.4.13 - 2018-11-13
• 0.4.11 - 2018-05-12
• 0.4.10 - 2018-05-12
• 0.4.9 - 2018-04-25
• 0.4.8 - 2018-04-23
• 0.4.7 - 2015-02-09

from adm-zip GitHub release notes

Commit messages

Package name: adm-zip

• 9d2eb0b Updated mocha version to fix vulnerability
• 9bb5fb9 Update project version
• 10a8c1c Merge pull request [Snyk Update] New fixes for 3 vulnerable dependency paths #250 from opichals/patch-1
• c87b983 Merge pull request [Snyk Update] New fixes for 2 vulnerable dependency paths #279 from willjouo/master
• de614ea Merge pull request [Snyk Update] New fixes for 5 vulnerable dependency paths #308 from tnir/copyedit-docs-with-https
• b94b8e5 Merge pull request [Snyk Update] New fixes for 6 vulnerable dependency paths #307 from tnir/update-nodejs-for-testing
• ff355f5 Merge pull request [Snyk-dev Update] New fixes for 54 vulnerable dependency paths #313 from mattsains/master
• a13f520 Merge pull request [Snyk-dev Update] New fixes for 54 vulnerable dependency paths #312 from saqibmushtaq/master
• 79c21ff fix: throw real exception objects on error
• 235e7bf Version number incremented
• b888b8a Update zipFile.js
• c3bb429 Update README.md with the latest URLs
• fce5aab Update Node.js version to use in CI tests
• 3180498 Version increment for npm publish
• 81d09ca Merge pull request [Snyk Update] New fixes for 1 vulnerable dependency path #266 from Dewep/master
• f66dc60 Merge pull request [Snyk Update] New fixes for 1 vulnerable dependency path #263 from leonaves/jsdoc/fix-typings
• 4cc87b9 Merge pull request [Snyk Update] New fixes for 1 vulnerable dependency path #270 from nleclerc/fixEmptyEntryError
• 8176b02 Merge pull request [Snyk Update] New fixes for 5 vulnerable dependency paths #301 from RocketChat/zip64
• 0a4e8ca Iterate over entries without storing their metadata
• d7a748c Add partial support for zip64 (larger number of entries)
• 203bd17 Escape $ sign for regex in addLocalFolder()
• ff17ae8 Merge pull request [Snyk Update] New fixes for 1 vulnerable dependency path #267 from teppeis/fix-crc
• 237bb7f fix accent filename
• e64e32c Removed improperly raised error while decompressing empty file asynchronously.

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs