What’s Vulnerable › Products
max-mapper extract-zip vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your max-mapper extract-zip version is affected
Latest max-mapper extract-zip vulnerabilities
- CVE-2026-19693 — extract-zip arbitrary file write outside the destination directory via a symlink at the final path component (CVSS 8.1)
- CVE-2026-56876 — extract-zip unvalidated symlink path traversal (CVSS 8.1)