Vulnerability index

Browse CVEs

4 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2026-39246 decompress before 4.2.2 allows arbitrary symlink creation during archive extraction. When processing symlink entries (type === 'symlink'), the x.link… Decompress after 4.2.1 Fix from $1,9502026-07-09 MEDIUM 6.2 CVE-2026-39245 decompress before 4.2.2 contains an improper path containment check that enables directory traversal and arbitrary file write. The safeMakeDir functi… Decompress after 4.2.1 Fix from $1,6002026-07-09 MEDIUM 5.5 CVE-2026-39243 decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When process… Decompress after 4.2.1 Fix from $1,6002026-07-09 CRITICAL 9.8 CVE-2020-12265 The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used, because o… Decompress 4.2.1+ Fix from $2,3002020-04-26