https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:18:33 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-33471 cnvd-2020-33471 https://cve.radiocsirt.org/vuln/cnvd-2020-33471 https://cve.radiocsirt.org/vuln/euvd-2026-41143 EUVD-2026-41143 https://cve.radiocsirt.org/vuln/euvd-2026-41143 https://cve.radiocsirt.org/vuln/fkie_cve-2020-12265 <p>The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used, because of Directory Traversal.</p> <p>The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used, because of Directory Traversal.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-12265 https://cve.radiocsirt.org/vuln/ghsa-qgfr-5hqp-vrw9 <p><strong>Affected:</strong> npm: decompress</p> <p>Versions of `decompress` prior to 4.2.1 are vulnerable to Arbitrary File Write. The package fails to prevent extraction of files with relative paths, allowing attackers to write to any folder in the system by including filenames containing`../`.</p> <p>## Recommendation</p> <p>Upgrade to version 4.2.1 or later.</p> <p><strong>Affected:</strong> npm: decompress</p> <p>Versions of `decompress` prior to 4.2.1 are vulnerable to Arbitrary File Write. The package fails to prevent extraction of files with relative paths, allowing attackers to write to any folder in the system by including filenames containing`../`.</p> <p>## Recommendation</p> <p>Upgrade to version 4.2.1 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-qgfr-5hqp-vrw9 https://cve.radiocsirt.org/vuln/gsd-2020-12265 gsd-2020-12265 https://cve.radiocsirt.org/vuln/gsd-2020-12265