As SDC work extensively with archives (artifacts), it's vulnerable to Zip Slip exploit https://snyk.io/research/zip-slip-vulnerability.

Suspected classes:

• onap/sdc/common-app-api/src/main/java/org/openecomp/sdc/common/util/ZipUtil.java
• onap/sdc/openecomp-be/lib/openecomp-common-lib/src/main/java/org/openecomp/sdc/common/utils/CommonUtil.java
• onap/sdc/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/main/java/org/openecomp/sdc/translator/utilsResourceWalker.java--
• onap/sdc/openecomp-be/tools/zusammen-tools/src/main/java/org/openecomp/core/tools/util/ZipUtils.java
• -onap/sdc/openecomp-be/lib/openecomp-core-lib/openecomp-utilities-lib/src/main/java/org/openecomp/core/utilities/file/FileUtils.java -> getFileContentMapFromZip-