XhmikosR vulnerabilities
We track 2 vulnerabilities in XhmikosR products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 28, 2026.
2vulnerabilities
2critical
0high
0exploited
9.1average CVSS score
Latest XhmikosR vulnerabilities
- 9.1 Critical severity
decompress: Improper Limitation of a Pathname to a Restricted Directory
The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output) API relies on lexical containment checks that do not account for the kernel following a planted symlink chain. An attacker can supply a craf
- 9.1 Critical severity
decompress: Improper Limitation of a Pathname to a Restricted Directory
The decompress package for Node.js extracts archives. Prior to 10.2.1 and 11.1.3, archive extraction can create files and links outside the target directory. When extracting an archive to a directory, a crafted archive can read or write files outside that dire