Threats Tagged 'cve-2026-53486'
View all threats tagged with 'cve-2026-53486'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-53486'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-mp2f-45pm-3cg9: Decompress: Archive extraction can create files and links outside of the target directoryCVE-2026-53486 0 A critical vulnerability in the @xhmikosr/decompress package allows crafted archive extraction to create files and links outside the intended target directory. This affects multiple archive formats including tar, tar.gz, tar.bz2, and zip. The flaw arises from improper path containment checks and insufficient sanitization of file modes, enabling potential exposure of arbitrary files and creation of setuid or setgid files when extraction is run as root. The upstream decompress package is unmaintained and vulnerable. Fixed versions are available in @xhmikosr/decompress 10.2.1 and 11.1.3. Join the discussion | GCVE Database | 07/06/2026, 20:27:38 UTC Added: 07/06/2026, 23:02:30 UTC |
Showing 1 to 1 of 1 result