HIGH8.4npm
GHSA-4c3q-x735-j3r5· CVE-2026-40931Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing
Modified: 5/5/2026
package
npm/compressing
pkg:npm/compressing
HIGH8.4npm
GHSA-cc8f-xg8v-72m3· CVE-2026-24884Compressing Vulnerable to Arbitrary File Write via Symlink Extraction
Modified: 2/4/2026