Medium
CVE-2026-114104
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 9
Reset filters
Medium
CVE-2026-114103
adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path
High
CVE-2026-114102
adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)
High
CVE-2026-92000
adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0
High
CVE-2026-102282
adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation
High
CVE-2026-77301
adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)
Medium
CVE-2026-76845
adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite
High
CVE-2026-39244
adm-zip: Crafted ZIP file triggers 4GB memory allocation
Medium
CVE-2018-1002204
Arbitrary File Write in adm-zip
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.