Known vulnerabilities in decompress
Vendor:
sindresorhus
Software:
decompress
Software CPE:
cpe:2.3:a:sindresorhus:decompress:*:*:*:*:*:npm:*:*
Website:
https://www.npmjs.com/~sindresorhus
Total vulnerabilities:
1
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
Vulnerabilities (1)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU25644 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
CWE-22 | High | - | 27.02.2020 |
SB2020022703 |