cb
cvebase
.
~
/
products
/
node.js
/
unzipper
Search CVEs, products, detections…
⌘K
pipeline live
Digest
Docs
Home
/
Products
/
node.js
/
Node.Js Unzipper
Node.Js Unzipper vulnerabilities
1 known vulnerability affecting
node.js/unzipper
.
Track
Version
All versions
Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM
1
Vulnerabilities
Sort
Most important
Highest Priority
Highest EPSS
Highest CVSS
Newest
Oldest
Page 1 of 1
CVE-2018-1002203
P3
MEDIUM
CVSS 5.5
≥ unspecified, < 0.8.13
2018-07-25
CVE-2018-1002203 [MEDIUM] CWE-22 CVE-2018-1002203: unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
nvd
Node.Js Unzipper vulnerabilities | cvebase