Decompress Project Decompress — known CVE vulnerabilities

Every CVE whose affected-product data names Decompress Project Decompress, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2020-12265 — CVSS 9.8 (critical): The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used…