Skip to content
OpenAdvisories

Product · ZJONSSON

node-unzipper

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-17514

    ZJONSSON node-unzipper extract.js Extract path traversal

    A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerability is the function Extract of the file lib/extract.js. This manipulation causes path traversal. The attack requires local access. The exploit has been publicly …

    ZJONSSON node-unzipper