All products

extract-zip

npm · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
extract-zip unvalidated symlink path traversalCVE-2026-56876 · GHSA-JMR9-QJV8-65GV extract-zipNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High No fix reported
extract-zip allows arbitrary file writes through symlink archive entriesCVE-2026-19693 · GHSA-7PQW-9J4J-H8Q3 extract-zipNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High No fix reported