Decompress Security Vulnerabilities - CVSS Score 9 - 10

cve

CVE-2020-12265

The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used, because of Directory Traversal.

9.8CVSS

9.3AI Score

0.006EPSS

2020-04-26 05:15 PM