TI-2026-54680 CVE-2026-78638 · GHSA-5jh7-c63f-jp85
peerigon unzip-crx/unzip-crx-3 Archive Extraction index.js unzip path traversal
Priority MEDIUM 55
A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0.
peerigon
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
peerigon records in CISA KEVNo peerigon vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2026-32543 CVE-2026-44643 · GHSA-pw8r-6689-xvf4
Angular Expressions - Remote Code Execution using filters
Priority MEDIUM 49
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module.
TI-2024-36267 CVE-2024-54152 · GHSA-5462-4vcx-jh7j
Angular Expressions - Remote Code Execution when using locals
Priority MEDIUM 46
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module.
TI-2021-04377 CVE-2021-21277 · GHSA-j6px-jwvv-vpwq
Angular Expressions - Remote Code Execution
Priority MEDIUM 43
angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node".
TI-2020-04275 CVE-2020-5219 · GHSA-hxhm-96pp-2m43
Remote Code Execution in Angular Expressions
Priority MEDIUM 43
Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compile(userControlledInput) where userControlledInput is text that comes from user input.