HIGH8.4npm
GHSA-4c3q-x735-j3r5· CVE-2026-40931Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing
Modified: 5/5/2026
package
pkg:npm/compressing
Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing
Modified: 5/5/2026
Compressing Vulnerable to Arbitrary File Write via Symlink Extraction
Modified: 2/4/2026