HIGH8.1npm
GHSA-7pqw-9j4j-h8q3· CVE-2026-19693extract-zip allows arbitrary file writes through symlink archive entries
Modified: 9/8/2026
package
npm/extract-zip
pkg:npm/extract-zip
HIGH8.1npm
GHSA-jmr9-qjv8-65gv· CVE-2026-56876extract-zip unvalidated symlink path traversal
Modified: 9/10/2026