VYPR

node-bestzip

by Nfriedly

CVEs (1)

  • CVE-2026-80427HigAug 26, 2026
    risk 0.55cvss 8.4epss

    bestzip builds the argument list for the system zip utility without separating options from operands. The destination archive path and the caller-supplied source paths are passed to the child process with no -- delimiter between them, so any source entry beginning with a hyphen…