Max-Mapper Extract-Zip
2 CVEs affecting Max-Mapper Extract-Zip. Latest disclosed: 2026-08-17. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-19693 | High | 8.1 | 2026-08-17 | extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive cont… |
CVE-2026-56876 | High | 8.1 | 2026-06-26 | extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like… |