CRITICAL9.1npm
GHSA-hrh2-vp3x-79xf· CVE-2026-101894@xhmikosr/decompress: Path traversal via symlink chain
Modified: 9/30/2026
package
npm/@xhmikosr/decompress
pkg:npm/%40xhmikosr/decompress
CRITICAL9.1npm
GHSA-mp2f-45pm-3cg9· CVE-2026-53486Decompress: Archive extraction can create files and links outside of the target directory
Modified: 9/10/2026