decompress vulnerabilities (TuxCare)

4 vulnerabilities.

• decompress TuxCare @xhmikosr/decompress: Path traversal via symlink chain CVE-2026-101894 Public exploitFix available 9.1 CriticalSeptember 28, 2026
• decompress TuxCare decompress allows arbitrary hardlink creation during archive extraction CVE-2026-39243 5.5 MediumJuly 9, 2026
• decompress TuxCare decompress: Archive extraction can create files and links outside the target directory CVE-2026-53486 Fix available 9.1 CriticalJuly 6, 2026
• decompress TuxCare decompress: Arbitrary File Write via Archive Extraction (Zip Slip) CVE-2026-10732 6.1 MediumJune 5, 2026