Vulnerabilities in node-modules

2 results
CVE-2026-24884HIGHCompressing Vulnerable to Arbitrary File Write via Symlink ExtractionEPSS 0.3%CVE-2026-40931HIGHComplete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressingEPSS 0.2%