decompress-zip vulnerabilities (npm)

4 vulnerabilities.

• decompress-zip npm tmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameter CVE-2025-54798 Fix available 2.5 LowSeptember 2, 2020
• decompress-zip npm jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify() CVE-2022-23540 Fix available 6.4 MediumSeptember 2, 2020
• decompress-zip npm Arbitrary File Overwrite in decompress-zip CVE-2017-16119 Fix available 7.5 HighJune 7, 2018
• decompress-zip npm Arbitrary File Overwrite in decompress-zip CVE-2017-16118 Fix available 7.5 HighJune 7, 2018