What’s Vulnerable › Products

node-modules compressing vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your node-modules compressing version is affected

Latest node-modules compressing vulnerabilities

• CVE-2026-40931 — Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing (CVSS 7.8)
• CVE-2026-24884 — Compressing Vulnerable to Arbitrary File Write via Symlink Extraction (CVSS 7.8)