Teire
Changes
Scan
Docs
Trust
← All changes
adm-zip (npm) · Teire
Changes
Scan
Docs
Trust
Sign in
Worker running
adm-zip
npm
latest
0.6.1
· 2026-09-11
www.npmjs.com · all 44 versions
Security advisories
7
adm-zip: adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)
fixed in 0.6.1
adm-zip: adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)
fixed in 0.6.1
adm-zip: adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path
fixed in 0.6.1
adm-zip: adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation
fixed in 0.6.1
adm-zip: adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content
fixed in 0.6.1
adm-zip: adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0
fixed in 0.6.1
adm-zip: adm-zip: Crafted ZIP file triggers 4GB memory allocation
fixed in 0.6.0
Versions that change something
0.6.0
2026-07
fixes 1 advisory
0.6.1
latest
2026-09
fixes 6 advisories