TI-2026-65199 CVE-2026-101894 · GHSA-hrh2-vp3x-79xf
@xhmikosr/decompress: Path traversal via symlink chain
Priority MEDIUM 49
The decompress package for Node.js extracts archives.
No kevva vulnerabilities are listed in CISA KEV.
1 record
The decompress package for Node.js extracts archives.