{"action":"Upgrade @appium/support to 7.2.6 or later.","affected":[{"fixed":"7.2.6","introduced":"0"}],"component":"@appium/support","cve_ids":["CVE-2026-103975"],"ecosystem":"npm","exploited":false,"fixed_versions":["7.2.6"],"ghsa_id":"GHSA-qfxx-c367-67f8","id":"tcs_01M5JHG871QZFSGZ9QGYWTZJWT","modified_at":"2026-10-15T20:30:05.447884211Z","published_at":"2026-10-15T20:18:56Z","references":["https://osv.dev/vulnerability/GHSA-qfxx-c367-67f8","https://github.com/appium/appium/security/advisories/GHSA-qfxx-c367-67f8","https://nvd.nist.gov/vuln/detail/CVE-2026-103975","https://github.com/appium/appium/pull/22436","https://github.com/appium/appium/commit/d9eb36f413153e28b04b92d8ce4447da270371c0","https://github.com/appium/appium","https://github.com/appium/appium/releases/tag/@appium/support@7.2.6"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-qfxx-c367-67f8","url":"https://osv.dev/vulnerability/GHSA-qfxx-c367-67f8"}],"summary":"Appium: Symlink based Zip Slip in @appium/support ZIP extraction"}