Jszip Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jszip Project records in CISA KEV

No Jszip Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Jszip · all components

TI-2022-23902 CVE-2022-48285 · GHSA-36fh-84j7-cv5h

MEDIUM 43

loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01411 Published 2023-01-29 Partial fix · 3.8.0 CWE-22

TI-2021-06105 CVE-2021-23413 · GHSA-jg8v-48h5-wgxg

LOW 30

This affects the package jszip before 3.7.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03441 Published 2021-07-25 Partial fix · 3.7.0, 2.7.0 CWE-1321