decompress project kayıtları
decompress project üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %75
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-59 Improper Link Resolution Before File Access ('Link Following')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-12265İstismar yok | The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used, decompress project · decompress · CWE-22 | Kritik9,8 | — | %2,1 | 26 Nis 2020 |
30İzleyin | CVE-2026-39246İstismar yok | decompress before 4.2.2 allows arbitrary symlink creation during archive extraction.decompress project · decompress · CWE-59 | Yüksek7,5 | — | %0,6 | 9 Tem 2026 |
24İzleyin | CVE-2026-39245İstismar yok | decompress before 4.2.2 contains an improper path containment check that enables directory traversal and arbitrary file write.decompress project · decompress · CWE-22 | Orta6,2 | — | %0,3 | 9 Tem 2026 |
22İzleyin | CVE-2026-39243İstismar yok | decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption.decompress project · decompress · CWE-59 | Orta5,5 | — | %0,3 | 9 Tem 2026 |
- CVE-2020-1226540Planlayın
The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used,
KritikCVSS 9,8İstismar yokEPSS %2decompress project · decompress26 Nis 2020
- CVE-2026-3924630İzleyin
decompress before 4.2.2 allows arbitrary symlink creation during archive extraction.
YüksekCVSS 7,5İstismar yokEPSS %0decompress project · decompress9 Tem 2026
- CVE-2026-3924524İzleyin
decompress before 4.2.2 contains an improper path containment check that enables directory traversal and arbitrary file write.
OrtaCVSS 6,2İstismar yokEPSS %0decompress project · decompress9 Tem 2026
- CVE-2026-3924322İzleyin
decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption.
OrtaCVSS 5,5İstismar yokEPSS %0decompress project · decompress9 Tem 2026