I'm working on a python REST API that allows users to upload ZIP files. Before extracting them, I want to protect against common vulnerabilities, especially Zip bombs. Is there a way (ideally based on standard libraries like zipfile) to safely validate and extract ZIP uploads in Python? I looked into third-party libraries like defusedzip or python-securezip but they seem outdated and not maintained. I also checked this related Stackoverflow question, but I could not find anything that mentions the protection against Zip bombs. Continue reading...
