[ Vendor · 1 CVEs ]
kevva
CVEs affecting kevva published in the last 30 days, plus any kevva CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-101894 | 28 Sep 2026 | CVSS 9.1 | @xhmikosr/decompress: Path traversal via symlink chainThe decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output) API relies on lexical… | Fix |