Max-mapper - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2026-08-17.

Products

• Extract-zip - 2 CVEs

Newest CVEs of Max-mapper

• CVE-2026-19693 - CVSS 8.1 (high), 2026-08-17: extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive…
• CVE-2026-56876 - CVSS 8.6 (high), 2026-06-26: extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path…