Skip to content

CVE record · 1 source

CVE-2026-114102

CVSS 7.5

adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.js process via a malformed…

Vendor: Node.js
Product: ImageMagick / Ghostscript / FFmpeg / libxml2, Node.js
CVSS: 7.5
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

15

CVE NVD 11d ago

adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.js process via a malformed…

adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.js process via a malformed ZIP file, because inflateAsync in methods/inflater.js lacks a zlib stream error…

CVSS 7.5 CVE-2026-114102 Node.js