Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Xhmikosr
Xhmikosr vulnerabilities
Products
Decompress
2
Newest
kevva
decompress
@xhmikosr/decompress: Path traversal via symlink chain
CVE-2026-101894
Public exploit
Fix available
9.1
Critical
September 28, 2026
xhmikosr
decompress
decompress: Archive extraction can create files and links outside the target directory
CVE-2026-53486
Fix available
9.1
Critical
July 6, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open