What’s Vulnerable › Products

cthackers adm-zip vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your cthackers adm-zip version is affected

Latest cthackers adm-zip vulnerabilities

• CVE-2026-116137 — adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names (CVSS 3.7)
• CVE-2026-114105 — Adm-zip before 0.6.1 Privilege Escalation via keepOriginalPermission Setuid Bits (CVSS 6.2)
• CVE-2026-114103 — adm-zip 0.6.0 Decompression Bomb Guard Bypass via getDataAsync() (CVSS 5.3)
• CVE-2026-114102 — adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event (CVSS 7.5)
• CVE-2026-114104 — adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass (CVSS 5.9)
• CVE-2026-102282 — adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation (CVSS 7.1)
• CVE-2026-77301 — adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS) (CVSS 7.5)
• CVE-2026-92000 — adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Size (CVSS 7.5)
• CVE-2026-76845 — adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction (CVSS 6.5)