101arrowz
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| fflate | 2 | – | Nov 5, 2026 |
Exploited and recent CVEs
- CVE-2026-122146 101arrowz fflate index.mjs unzipSync memory corruption 0.3%
- CVE-2026-45820 fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory entry declaring compressed_size=0xFFFFFFFF (ZIP64 sentinel) 0.3%