EUVD-2018-0248

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Unzipper npm library prior to version 0.8.13 has a Zip-Slip vulnerability allowing directory traversal.

Reporter	Title	Published	Views	Family All 14
Broadcom	BSA-2018-662	21 Jun 201800:00	–	broadcom
CNVD	unzipper path traversal vulnerability	26 Jul 201800:00	–	cnvd
Check Point Advisories	ZIP Slip Arbitrary File Overwrite Remote Code Execution (CVE-2018-1002200; CVE-2018-1002201; CVE-2018-1002203; CVE-2018-1002204; CVE-2018-1002205; CVE-2018-1002206; CVE-2018-1002207; CVE-2018-1261; CVE-2018-8008; CVE-2018-8009; CVE-2021-43555)	6 Jun 201800:00	–	checkpoint_advisories
CVE	CVE-2018-1002203	25 Jul 201817:00	–	cve
Cvelist	CVE-2018-1002203	25 Jul 201817:00	–	cvelist
F5 Networks	K64709522: Multiple Zip Slip vulnerabilities	21 Feb 202318:46	–	f5
Github Security Blog	Arbitrary File Write via Archive Extraction in unzipper	27 Jul 201817:06	–	github
Hacker One	Node.js third-party modules: Arbitrary File Write through archive extraction	5 Jun 201816:01	–	hackerone
Node.js	Arbitrary File Write via Archive Extraction	3 Aug 201815:08	–	nodejs
NVD	CVE-2018-1002203	25 Jul 201817:29	–	nvd

[
  {
    "enisaIdVendor": [
      {
        "id": "2a6d5299-5f65-37c3-a3e5-ee354e1c971b",
        "vendor": {
          "name": "Node.js"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "955ed735-c01d-3137-9b72-a3c323a92b78",
        "product": {
          "name": "unzipper"
        },
        "product_version": "unspecified <0.8.13"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-1002203
github	www.github.com/ZJONSSON/node-unzipper/pull/59
github	www.github.com/ZJONSSON/node-unzipper/commit/2220ddd5b58f6252069a4f99f9475441ad0b50cd
hackerone	www.hackerone.com/reports/362119
github	www.github.com/advisories/GHSA-884w-698f-927f
github	www.github.com/snyk/zip-slip-vulnerability
snyk	www.snyk.io/research/zip-slip-vulnerability
snyk	www.snyk.io/vuln/npm:unzipper:20180415
npmjs	www.npmjs.com/advisories/680
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.7Medium risk

Vulners AI Score5.7

CVSS 35.5

CVSS 24.3

EPSS0.0557