Cthackers Adm-zip vulnerabilities
- cthackers adm-zipadm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names6.3 Medium
- cthackers adm-zipAdm-zip before 0.6.1 Privilege Escalation via keepOriginalPermission Setuid Bits6.9 Medium
- cthackers adm-zipadm-zip 0.6.0 Decompression Bomb Guard Bypass via getDataAsync()6.9 Medium
- cthackers adm-zipadm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event8.7 High
- cthackers adm-zipadm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass8.2 High
- cthackers adm-zipadm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation7.1 High
- cthackers adm-zipadm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Size8.7 High
- cthackers adm-zipadm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction6.8 Medium
- cthackers adm-zipadm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)7.5 High