Skip to content
OpenAdvisories

Package · npm

zip-local

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2021-23484

    Arbitrary File Write via Archive Extraction (Zip Slip)

    The package zip-local before 0.3.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can lead to an extraction of a crafted file outside the intended extraction directory.

    zip-local npm