Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
adm-zip may let attackers extract files
published 25 days ago
Summary
The adm-zip library could be tricked into extracting files from untrusted sources, potentially giving attackers access to your system. A new version has been released that corrects this behavior. Update to version 0.5.10-tuxcare.3 as soon as possible.
What to do
- Update cthackers adm-zip to version 0.5.10-tuxcare.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | cthackers | adm-zip |
< 0.5.10-tuxcare.3 Fix: upgrade to 0.5.10-tuxcare.3
|
Original advisory text
TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.10-tuxcare.3.
Timeline
Published10 Oct 2026
Updated10 Oct 2026
First seen10 Oct 2026
Sources
CLSA-2026-1791626782 · OSV
Track software like this
Free during beta