decompress
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- npm
- Vulnerability status
- 5 advisory(ies) without a verdict
Advisories (5)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-h39j-r5qq-r9mm decompress: Arbitrary File Write via Archive Extraction (Zip Slip) | ≤ 4.2.1 | Undetermined |
| GHSA-hrh2-vp3x-79xf @xhmikosr/decompress: Path traversal via symlink chain | ≤ 4.2.1 | Undetermined |
| GHSA-jwp9-9v96-94mx decompress allows arbitrary hardlink creation during archive extraction | ≤ 4.2.1 | Undetermined |
| GHSA-mp2f-45pm-3cg9 Decompress: Archive extraction can create files and links outside of the target directory | ≤ 4.2.1 | Undetermined |
| GHSA-qgfr-5hqp-vrw9 Path Traversal in decompress | < 4.2.1 | Undetermined |
Sources
| Source | Licence |
|---|