安全: node-modules/compressing
安全
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Arbitrary file write outside the extraction directory via a multi-hop dangling symlink chain (bypass of the CVE-2026-24884 / CVE-2026-40931 fix)GHSA-ghrx-wjp4-xcwj published
Aug 7, 2026 by fengmk2Moderate -
Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing v2.1.0GHSA-4c3q-x735-j3r5 published
Apr 13, 2026 by fengmk2High -
Arbitrary File Write via Symlink Extraction in compressingGHSA-cc8f-xg8v-72m3 published
Feb 3, 2026 by fengmk2High
Learn more about advisories related to node-modules/compressing in the GitHub Advisory Database