@rootio/decompress vulnerabilities (Root)

3 vulnerabilities.

• @rootio/decompress Root @xhmikosr/decompress: Path traversal via symlink chain CVE-2026-101894 Public exploitFix available 9.1 CriticalSeptember 28, 2026
• @rootio/decompress Root decompress: Archive extraction can create files and links outside the target directory CVE-2026-53486 Fix available 9.1 CriticalJuly 6, 2026
• @rootio/decompress Root Path Traversal in decompress CVE-2020-12265 Fix available 9.8 CriticalApril 26, 2020