Medium severity5.3OSV Advisory· Published Jul 27, 2026· Updated Jul 27, 2026
CVE-2026-17514
CVE-2026-17514
Description
A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerability is the function Extract of the file lib/extract.js. This manipulation causes path traversal. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 0.12.0, 0.12.1, 0.12.2, …
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.