Skip to content
OpenAdvisories

Package · npm

unzip-stream

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    GHSA-6jrj-vc65-c983

    unzip-stream allows Arbitrary File Write via artifact extraction

    ### Impact When using the `Extract()` method of unzip-stream, malicious zip files were able to write to paths they shouldn't be allowed to. ### Patches Fixed in 0.3.2 ### References - https://snyk.io/research/zip-slip-vulnerability - https://github.com/mhr3/u…

    unzip-stream npm