TI-2026-24530 CVE-2026-31988 · GHSA-gmq8-994r-jv83
yauzl 3.2.0 - Denial of Service via Off-by-One Error in NTFS Timestamp Parser
Priority HIGH 70
yauzl (aka Yet Another Unzip Library) version 3.2.0 for Node.js contains an off-by-one error in the NTFS extended timestamp extra field parser within the getLastModDate() function.