@airbase/airbase-cli (>=2.0.0-alpha.7, <=3.0.0-beta.15), @azrico/azcli (>=1.0.5, <=1.2.33) +65 more potentially affected by CVE-2026-17524 via zip-lib (>=0.5.0, <=1.0.5)

zip-lib NPM version =0.5.0, =2.0.0-alpha.7, =1.0.5, =1.5.5, =1.1.5, =1.5.1, =1.5.3, =1.1.0, =2.0.0, =1.0.0-rc.10, =1.0.0-rc.11, =1.0.0-rc.11, =1.0.0-rc.12 - @douarmc/core-build-tasks 0.1.0 and more Source cves: CVE-2026-17524 Source advisory: MEND:CVE-2026-17524...

CVE-2026-17524

Versions of the package zip-lib before 1.1.0 are vulnerable to Directory Traversal via the caching mechanism for path validation during the extraction process. An attacker can bypass security checks designed to prevent directory traversal. The intended security function, isOutsideTargetFolder, on...

CVE-2026-17524: Improper Limitation of a Pathname to a Restricted Directory

Versions of the package zip-lib before 1.1.0 are vulnerable to Directory Traversal via the caching mechanism for path validation during the extraction process. An attacker can bypass security checks designed to prevent directory traversal. The intended security function, isOutsideTargetFolder, on...

Malware in com.unity.sharp-zip-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in com.unity.sharp-zip-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cedde339d72e05699d5f33d7c16779f926f419baded72d7cd78d2610395cc807 The package com.unity.sharp-zip-lib was found to contain malicious code. Source: ghsa-malware...

modern-web-swiss-army-knife (>=2.2.1, <=2.7.2) potentially affected by CVE-2026-17524 via zip-lib (>=1.0.4, <=1.0.5)

zip-lib NPM version =1.0.4, =2.2.1, =2.7.2 Source cves: CVE-2026-17524 Source advisory: SNYK:JS-ZIPLIB-13834403...