HIGH8.1npm
GHSA-7pqw-9j4j-h8q3· CVE-2026-19693extract-zip allows arbitrary file writes through symlink archive entries
Modified: 9/8/2026
package
pkg:npm/extract-zip
extract-zip allows arbitrary file writes through symlink archive entries
Modified: 9/8/2026
extract-zip unvalidated symlink path traversal
Modified: 9/10/2026