CVE-2026-114102

The adm-zip library (versions before 0.6.1 ) is vulnerable to a Denial of Service (DoS) attack. The root cause is located in methods/inflater.js, where the inflateAsync function lacks a zlib stream error listener . An unauthenticated attacker can provide a malformed ZIP file containing corrupted ...