101arrowz fflate

• CVE-2026-122146 High 7.3 101arrowz fflate index.mjs unzipSync memory corruption 0.3%
• CVE-2026-45820 Medium 6.6 fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory entry declaring compressed_size=0xFFFFFFFF (ZIP64 sentinel) 0.3%