npm/decompress-zip: high
Arbitrary File Overwrite in decompress-zip
Action: Upgrade decompress-zip to 0.2.2 or later.
npm i decompress-zip@0.2.2npm i decompress-zip@0.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.2 | - |
| 0.3.0 | 0.3.2 | - |
Fixed versions
| 0.2.2 | 0.3.2 |
Sources
- osv: GHSA-73v8-v6g4-vrpm
- https://github.com/nodejs/security-wg/blob/master/vuln/npm/488.json
- https://snyk.io/research/zip-slip-vulnerability
- https://www.npmjs.com/advisories/777
published · modified · JSON