Skip to content
OpenAdvisories

Package · npm

@wakaru/cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-54545

    @wakaru/cli arbitrary file write during bundle unpack

    wakaru is a JavaScript decompiler and unminifier toolkit. From 1.0.0 until 1.4.0, @wakaru/cli sanitizes bundle-controlled module filenames only once before writing extracted modules, so a crafted filename containing overlapping traversal sequences such as ...…

    pionxzh wakaru @wakaru/cli npm