archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-78929.json"