Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package adm-zip, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (1)
CVE-2018-1002204 — CVSS 5.5 (medium): adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot…