PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
decompress @xhmikosr/decompress: Path traversal via symlink chain Critical 9.1 5 hours ago 5 hours ago
@xhmikosr/decompress @xhmikosr/decompress: Path traversal via symlink chain Critical 9.1 5 hours ago 5 hours ago
decompress Decompress: Archive extraction can create files and links outside of the target directory Critical 9.1 2 months ago 20 days ago
@xhmikosr/decompress Decompress: Archive extraction can create files and links outside of the target directory Critical 9.1 2 months ago 20 days ago
decompress decompress allows arbitrary hardlink creation during archive extraction Medium Risk 5.5 2 months ago 1 month ago
decompress decompress: Arbitrary File Write via Archive Extraction (Zip Slip) Medium Risk 6.4 3 months ago 1 month ago
array-public-code-async-decompress Malicious code in array-public-code-async-decompress (npm) Unknown 10 months ago 10 months ago
balance-decompress-authorize-query-thread Malicious code in balance-decompress-authorize-query-thread (npm) Unknown 10 months ago 10 months ago
byte-decompress-cold-deploy-wind Malicious code in byte-decompress-cold-deploy-wind (npm) Unknown 10 months ago 10 months ago
catch-byte-decompress-cluster-assert Malicious code in catch-byte-decompress-cluster-assert (npm) Unknown 10 months ago 10 months ago
chi-iota-decompress-sed-emulate Malicious code in chi-iota-decompress-sed-emulate (npm) Unknown 10 months ago 10 months ago
cluster-decompress-double-encode-quick Malicious code in cluster-decompress-double-encode-quick (npm) Unknown 10 months ago 10 months ago
compile-xi-small-star-decompress Malicious code in compile-xi-small-star-decompress (npm) Unknown 10 months ago 10 months ago
decompress-deserialize-nu-new-emulate Malicious code in decompress-deserialize-nu-new-emulate (npm) Unknown 10 months ago 10 months ago
decompress-sed-sudo-index-nu Malicious code in decompress-sed-sudo-index-nu (npm) Unknown 10 months ago 10 months ago
decompress-simple-lambda-container-meta Malicious code in decompress-simple-lambda-container-meta (npm) Unknown 10 months ago 10 months ago
decompress-tree-protected-upsilon-mu Malicious code in decompress-tree-protected-upsilon-mu (npm) Unknown 10 months ago 10 months ago
emulate-private-alpha-decompress-view Malicious code in emulate-private-alpha-decompress-view (npm) Unknown 10 months ago 10 months ago
emulate-tau-grep-resolve-decompress Malicious code in emulate-tau-grep-resolve-decompress (npm) Unknown 10 months ago 10 months ago
export-decompress-integer-encrypt-void Malicious code in export-decompress-integer-encrypt-void (npm) Unknown 10 months ago 10 months ago
file-decompress-gamma-wind-object Malicious code in file-decompress-gamma-wind-object (npm) Unknown 10 months ago 10 months ago
meta-load-thread-grep-decompress Malicious code in meta-load-thread-grep-decompress (npm) Unknown 10 months ago 10 months ago
old-decompress-scale-throw-user Malicious code in old-decompress-scale-throw-user (npm) Unknown 10 months ago 10 months ago
optimize-proxy-alpha-cache-decompress Malicious code in optimize-proxy-alpha-cache-decompress (npm) Unknown 10 months ago 10 months ago
serialize-minify-decompress-mu-cron Malicious code in serialize-minify-decompress-mu-cron (npm) Unknown 10 months ago 10 months ago
stub-emulate-decompress-view-sandbox Malicious code in stub-emulate-decompress-view-sandbox (npm) Unknown 10 months ago 10 months ago
user-lambda-decompress-benchmark-omega Malicious code in user-lambda-decompress-benchmark-omega (npm) Unknown 10 months ago 10 months ago
visualize-decompress-finally-abstract-final Malicious code in visualize-decompress-finally-abstract-final (npm) Unknown 10 months ago 10 months ago
awk-node-decompress-process-fire Malicious code in awk-node-decompress-process-fire (npm) Unknown 1 year ago 1 year ago
balance-chi-decompress-chi-code Malicious code in balance-chi-decompress-chi-code (npm) Unknown 1 year ago 1 year ago
beta-decompress-daemon-minify-simple Malicious code in beta-decompress-daemon-minify-simple (npm) Unknown 1 year ago 1 year ago
code-file-decompress-decompress-byte Malicious code in code-file-decompress-decompress-byte (npm) Unknown 1 year ago 1 year ago
import-cron-test-decompress-log Malicious code in import-cron-test-decompress-log (npm) Unknown 1 year ago 1 year ago
simple-zero-shell-zeta-decompress Malicious code in simple-zero-shell-zeta-decompress (npm) Unknown 1 year ago 1 year ago
try-refactor-yaml-decompress-phi Malicious code in try-refactor-yaml-decompress-phi (npm) Unknown 1 year ago 1 year ago
decompress Path Traversal in decompress Critical 9.8 6 years ago 2 years ago
com.unity.meshopt.decompress Malicious code in com.unity.meshopt.decompress (npm) Unknown 3 years ago 3 years ago
decompress-zip Arbitrary File Overwrite in decompress-zip High Risk 8.0 6 years ago 6 years ago
Data courtesy of OSV.dev
Page 1