Skip to content

Xhmikosr Decompress vulnerabilities

kevva decompress@xhmikosr/decompress: Path traversal via symlink chainCVE-2026-101894Public exploitFix available9.1 CriticalSeptember 28, 2026
xhmikosr decompressdecompress: Archive extraction can create files and links outside the target directoryCVE-2026-53486Fix available9.1 CriticalJuly 6, 2026