@types/unzipper

@types/unzipper

NPMNPM
NPMwww.npmjs.com
GitHubgithub.com
Releases20
Frequency4 months 2 weeks
Last Release
TypeScript definitions for unzipper
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2018-1002203NVD↗
< 0.8.13—4.3 MEDIUM

unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.