Skip to content
OpenAdvisories

Package · npm

decompress-zip

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-73v8-v6g4-vrpm

    Arbitrary File Overwrite in decompress-zip

    Vulnerable versions of `decompress-zip` are affected by the Zip-Slip vulnerability, an arbitrary file write vulnerability. The vulnerability occurs because `decompress-zip` does not verify that extracted files do not resolve to targets outside of the extracti…

    decompress-zip npm