Node Unzipper

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-17514 Jul 27, 13:15 LOW POC Monitor

Path traversal in ZJONSSON node-unzipper up to version 0.12.3 allows local attackers with low privileges to write files outside the intended extraction directory by crafting a malicious archive. Exploit code is publicly available, but no active exploitation has been confirmed. The vendor has not yet responded to the vulnerability report.

Path Traversal Node Unzipper

NVD VulDB GitHub

CVSS 4.0

1.9

EPSS

0.1%

CVE-2026-17514

EPSS 0% CVSS 1.9

LOW POC Monitor

Path traversal in ZJONSSON node-unzipper up to version 0.12.3 allows local attackers with low privileges to write files outside the intended extraction directory by crafting a malicious archive. Exploit code is publicly available, but no active exploitation has been confirmed. The vendor has not yet responded to the vulnerability report.

Path Traversal Node Unzipper

NVD VulDB GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy