adm-zip duplicate-entry validation bypass through version 0.6.1

adm-zip through version 0.6.1 contains a duplicate-entry validation bypass that allows attackers to evade the readEntries() check by using canonically equivalent entry names such as “./hello.txt” and “hello.txt”.