Editor: The quazip version has vulnerabilities

[zengjia1]

Description

A patch for quazip vulnerability (CVE-2018-1002209) was released on June 13, 2018, but thunder did not take advantage of the patch.

vulnerability link：https://nvd.nist.gov/vuln/detail/CVE-2018-1002209
path link：stachenov/quazip@5d2fc16

Steps to Reproduce

[eprikazchikov]

Thank you for the feedback. Unfortunately I'm unable to update quazip completely because its unzip part of it became incompatible with others libraries. My suggestion is to fix particular part of this library.