{"action":"Upgrade @appium/support to 7.0.6 or later.","affected":[{"fixed":"7.0.6","introduced":"0"}],"component":"@appium/support","cve_ids":["CVE-2026-30973"],"ecosystem":"npm","epss":0.00432,"exploited":false,"fixed_versions":["7.0.6"],"ghsa_id":"GHSA-rfx7-4xw3-gh4m","id":"tcs_01M5KG8ZDS7MZZ81SZP06PJ2HJ","modified_at":"2026-03-13T04:42:12.076717Z","published_at":"2026-03-11T00:22:38Z","references":["https://osv.dev/vulnerability/GHSA-rfx7-4xw3-gh4m","https://github.com/appium/appium/security/advisories/GHSA-rfx7-4xw3-gh4m","https://nvd.nist.gov/vuln/detail/CVE-2026-30973","https://github.com/appium/appium","https://github.com/appium/appium/releases/tag/@appium/support@7.0.6"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-rfx7-4xw3-gh4m","url":"https://osv.dev/vulnerability/GHSA-rfx7-4xw3-gh4m"}],"summary":"@appium/support has a Zip Slip arbitrary file write in its ZIP extraction"}