Unzipper Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Unzipper Project records in CISA KEV

No Unzipper Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Unzipper 1 record LOW

Records

1 record

TI-2018-16135 CVE-2018-1002203 · GHSA-884w-698f-927f

Path traversal in NodeJS unzipper

LOW 38

unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.10553 Published 2018-07-25 Fixed in 0.8.13 CWE-22

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0