adm-zip — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in adm-zip, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-114105	Adm-zip before 0.6.1 Privilege Escalation via keepOriginalPermission Setuid Bits CWE-732	6.2	Medium	2026-10-21
CVE-2026-114104	adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass CWE-436	5.9	Medium	2026-10-21
CVE-2026-114103	adm-zip 0.6.0 Decompression Bomb Guard Bypass via getDataAsync() CWE-400	5.3	Medium	2026-10-21
CVE-2026-114102	adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event CWE-248	7.5	High	2026-10-21
CVE-2026-102282	adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation CWE-732	7.1	High	2026-10-05
CVE-2026-77301	adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS) CWE-789	7.5	High	2026-09-18
CVE-2026-92000	adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Size CWE-409	7.5	High	2026-09-15
CVE-2026-76845	adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction CWE-59	6.5	Medium	2026-08-24
CVE-2018-1002204	adm-zip npm library 路径遍历漏洞 CWE-22	5.5	-	2018-07-25

All 9 known CVE vulnerabilities affecting adm-zip with full Chinese analysis, references, and POCs where available.