Cthackers

4 CVEs across 1 Cthackers products. Browse Cthackers vulnerabilities, severities, and proof-of-concept exploits.

Cthackers products with known CVEs

ProductCVEs
Adm-Zip4
Cthackers CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-102282High7.12026-10-05adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored in a zip e…
CVE-2026-77301High7.52026-09-18adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData() in zipEntry.js trusts an entry's central-directo…
CVE-2026-92000High7.52026-09-15adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. Attackers can craft malic…
CVE-2026-76845Medium6.52026-08-24adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the st…