max-mapper
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| extract-zip | 2 | – | Aug 17, 2026 |
Exploited and recent CVEs
- CVE-2026-19693 extract-zip arbitrary file write outside the destination directory via a symlink at the final path component 0.5%
- CVE-2026-56876 extract-zip unvalidated symlink path traversal 0.5%