[ Vendor · 5 CVEs ]
cthackers
CVEs affecting cthackers published in the last 30 days, plus any cthackers CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114103 | 21 Oct 2026 | CVSS 5.3 | cthackers adm-zipadm-zip 0.6.0 contains a decompression bomb protection bypass that allows attackers to evade the maxOutputLength guard by targeting the asynchronous… | |
| CVE-2026-114104 | 21 Oct 2026 | CVSS 5.9 | cthackers adm-zipadm-zip before 0.6.1 contains an inconsistent entry resolution vulnerability that allows attackers to bypass content validation by supplying ZIP… | |
| CVE-2026-114105 | 21 Oct 2026 | CVSS 6.2 | cthackers adm-zipAdm-zip before 0.6.1 contains an incorrect permission assignment vulnerability that allows attackers to set setuid, setgid, or sticky bits on… | |
| CVE-2026-114102 | 21 Oct 2026 | CVSS 7.5 | cthackers adm-zipadm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.js process via a malformed… | |
| CVE-2026-102282 | 5 Oct 2026 | CVSS 7.1 | adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalationadm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored… | Fix |