@rootio/adm-zip vulnerabilities (Root)
4 vulnerabilities.
-
@rootio/adm-zipRoot adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation 7.1 High -
@rootio/adm-zipRoot adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Size 8.7 High -
@rootio/adm-zipRoot adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS) 7.5 High -
@rootio/adm-zipRoot adm-zip: Crafted ZIP file triggers 4GB memory allocation 7.5 High