Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Jszip Project Subscribe
Filtered by product Jszip
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-48285 1 Jszip Project 1 Jszip 2023-03-03 N/A 7.3 HIGH
loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive.
CVE-2021-23413 1 Jszip Project 1 Jszip 2021-08-27 5.0 MEDIUM 5.3 MEDIUM
This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance.