Node-modules Compressing — known CVE vulnerabilities

Every CVE whose affected-product data names Node-modules Compressing, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-24884 — CVSS 8.4 (high): Compressing is a compressing and uncompressing lib for node. In version 2.0.0 and 1.10.3 and prior, Compressing extracts TAR archives while…
• CVE-2026-40931 — CVSS 8.4 (high): Compressing is a compressing and uncompressing lib for node. Prior to 2.1.1 and 1.10.5, the patch for CVE-2026-24884 relies on a purely…