fflate vulnerabilities

1 known vulnerability in fflate from 101arrowz. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  fflate: Uncontrolled Resource Consumption

  CVE-2026-45820Jul 22, 2026101arrowz

  fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory entry declaring compressed_size=0xFFFFFFFF (ZIP64 sentinel) but missing the required ZIP64 extra field tag 0x0001 causes