decompress
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| @xhmikosr/decompress: Path traversal via symlink chain | @xhmikosr/decompressdecompress | npm | Critical | Fix reported | |
| Decompress: Archive extraction can create files and links outside of the target directory | @xhmikosr/decompressdecompress | npmRed Hat | Critical | Fix reported | |
| decompress allows arbitrary hardlink creation during archive extraction | decompressRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-operator-bundle | npmRed Hat | Medium | No fix reported | |
| decompress: Arbitrary File Write via Archive Extraction (Zip Slip) | decompressRed Hat Build of Keycloak/decompress | npmRed Hat | Medium | No fix reported | |
| Path Traversal in decompress | decompress | npm | Critical | Fix reported |