Bower Decompress-Zip vulnerabilities
We track 1 vulnerability in Bower Decompress-Zip products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 8, 2026.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Bower Decompress-Zip vulnerabilities
- 7.8 High severity
decompress-zip: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in `lib/decompress-zip.js` improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to p