node-extract-zip vulnerabilities (Ubuntu)

2 vulnerabilities.

• node-extract-zip Ubuntu extract-zip arbitrary file write outside the destination directory via a symlink at the final path component CVE-2026-19693 Fix available 8.1 HighAugust 17, 2026
• node-extract-zip Ubuntu extract-zip unvalidated symlink path traversal CVE-2026-56876 Public exploitFix available 8.6 HighJune 26, 2026