adm-zip vulnerabilities (npm)
7 vulnerabilities.
-
adm-zipnpm adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass 8.2 High -
adm-zipnpm adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation 7.1 High -
adm-zipnpm adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Size 8.7 High -
adm-zipnpm adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction 6.8 Medium -
adm-zipnpm adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS) 7.5 High -
adm-zipnpm adm-zip: Crafted ZIP file triggers 4GB memory allocation 7.5 High -
adm-zipnpm Arbitrary File Write in adm-zip 5.5 Medium