Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CLSA-2026-1791225543
  • TuxCare:npm/decompress
 TuxCare security update for decompress (2 CVEs) 13 hours ago
  • Fix available
ROOT-APP-NPM-AIKIDO-2026-130799
  • Root:npm/@rootio/xhmikosr__decompress
  • Root:npm/@xhmikosr/decompress
 AIKIDO-2026-130799 in @xhmikosr/decompress - Patched by Root 4 days ago
  • Fix available
ROOT-APP-NPM-CVE-2026-53486
  • Root:npm/@rootio/decompress
  • Root:npm/@rootio/xhmikosr__decompress
  • Root:npm/@xhmikosr/decompress
  • Root:npm/decompress
 CVE-2026-53486 in @xhmikosr/decompress - Patched by Root 4 days ago
  • Fix available
GHSA-hrh2-vp3x-79xf
  • npm/@xhmikosr/decompress
  • npm/decompress
 @xhmikosr/decompress: Path traversal via symlink chain 6 days ago
  • Fix available
  • Severity - 9.1 (Critical)
CVE-2026-101894
  • github.com/xhmikosr/decompress
 @xhmikosr/decompress: Path traversal via symlink chain 28 Sep
  • Fix available
  • Severity - 9.1 (Critical)
RUSTSEC-2026-0328
  • crates.io/decompress
 `decompress`: tar-family extractors write archive entries without a path-traversal check (tar-slip) 19 Sep
  • No fix available
  • Severity - 7.1 (High)
CLSA-2026-1774225215
  • TuxCare:npm/decompress-zip
 TuxCare security update for decompress-zip (1 CVE) 04 Aug
  • Fix available
CVE-2026-53486
  • github.com/xhmikosr/decompress
 decompress: Archive extraction can create files and links outside the target directory 14 Jul
  • Fix available
  • Severity - 9.1 (Critical)
ROOT-APP-NPM-CVE-2020-12265
  • Root:npm/@rootio/decompress
  • Root:npm/decompress
 CVE-2020-12265 in @rootio/decompress - Patched by Root 14 Jul
  • Fix available
GHSA-jwp9-9v96-94mx
  • npm/decompress
 decompress allows arbitrary hardlink creation during archive extraction 10 Jul
  • No fix available
  • Severity - 5.5 (Medium)
CVE-2026-39243
  • github.com/kevva/decompress
 See record for full details 09 Jul
  • No fix available
  • Severity - 5.5 (Medium)
CVE-2026-39245
  • github.com/kevva/decompress
 See record for full details 09 Jul
  • No fix available
  • Severity - 6.2 (Medium)
CVE-2026-39246
  • github.com/kevva/decompress
 See record for full details 09 Jul
  • No fix available
  • Severity - 7.5 (High)
GHSA-mp2f-45pm-3cg9
  • npm/@xhmikosr/decompress
  • npm/decompress
 Decompress: Archive extraction can create files and links outside of the target directory 06 Jul
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-h39j-r5qq-r9mm
  • npm/decompress
 decompress: Arbitrary File Write via Archive Extraction (Zip Slip) 05 Jun
  • No fix available
  • Severity - 5.6 (Medium)
MAL-2025-185569
  • npm/array-public-code-async-decompress
 Malicious code in array-public-code-async-decompress (npm) 13 Nov 2025
  • No fix available
Load more...