Skip to content
OpenAdvisories

Vendor

Bower Decompress-Zip

1 known vulnerabilities.

Products

decompress-zip 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-107709

    Bower decompress-zip has a path traversal vulnerability

    A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in `lib/decompress-zip.js` improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to …

    Bower Decompress-Zip decompress-zip