Cthackers Adm-Zip
4 CVEs affecting Cthackers Adm-Zip. Latest disclosed: 2026-10-05. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-77301 | High | 7.5 | 2026-09-18 | adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData() in zipEntry.js trusts an entry's central-directo… |
CVE-2026-92000 | High | 7.5 | 2026-09-15 | adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. Attackers can craft malic… |
CVE-2026-102282 | High | 7.1 | 2026-10-05 | adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored in a zip e… |
CVE-2026-76845 | Medium | 6.5 | 2026-08-24 | adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the st… |