@xhmikosr/decompress vulnerabilities (npm)

2 vulnerabilities.

• @xhmikosr/decompress npm @xhmikosr/decompress: Path traversal via symlink chain CVE-2026-101894 Public exploitFix available 9.1 CriticalSeptember 28, 2026
• @xhmikosr/decompress npm decompress: Archive extraction can create files and links outside the target directory CVE-2026-53486 Fix available 9.1 CriticalJuly 6, 2026