compressing vulnerabilities (npm)

2 vulnerabilities.

• compressing npm Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing CVE-2026-40931 Fix available 8.4 HighApril 17, 2026
• compressing npm Compressing Vulnerable to Arbitrary File Write via Symlink Extraction CVE-2026-24884 Fix available 8.4 HighFebruary 3, 2026