MEDIUM6.4npm
GHSA-h39j-r5qq-r9mm· CVE-2026-10732decompress: Arbitrary File Write via Archive Extraction (Zip Slip)
Modified: 8/13/2026
package
npm/decompress
pkg:npm/decompress
MEDIUM5.5npm
GHSA-jwp9-9v96-94mx· CVE-2026-39243decompress allows arbitrary hardlink creation during archive extraction
Modified: 8/13/2026
CRITICAL9.1npm
GHSA-mp2f-45pm-3cg9· CVE-2026-53486Decompress: Archive extraction can create files and links outside of the target directory
Modified: 9/10/2026
CRITICAL9.8npm
GHSA-qgfr-5hqp-vrw9· CVE-2020-12265Path Traversal in decompress
Modified: 11/8/2023