https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T21:39:15.241325+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-17514 CVE-2026-17514 — ZJONSSON node-unzipper extract.js Extract path traversal 2026-10-18T21:39:15.260396+00:00

Affected: ZJONSSON node-unzipper

A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerability is the function Extract of the file lib/extract.js. This manipulation causes path traversal. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.