@xhmikosr/decompress

Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.

At a glance

Ecosystem
npm
Vulnerability status
2 advisory(ies) without a verdict

Advisories (2)

AdvisoryAffected versionsLatest version
GHSA-hrh2-vp3x-79xf
@xhmikosr/decompress: Path traversal via symlink chain
11.0.0 – < 11.1.4 ; < 10.2.2Undetermined
GHSA-mp2f-45pm-3cg9
Decompress: Archive extraction can create files and links outside of the target directory
< 10.2.1 ; 11.0.0 – < 11.1.3Undetermined

Sources

SourceLicence