How many Node.js unzipper CVEs are in CISA KEV?

None of Node.js unzipper's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Node.js unzipper are affected?

2 distinct Node.js unzipper versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Node.js unzipper CVEs?

Node.js unzipper's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

What is the average severity of Node.js unzipper CVEs?

The average CVSS base score across Node.js unzipper's scored CVEs is 5.5.

Node.js unzipper Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Node.js unzipper vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Node.js unzipper Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Node.js unzipper has 1 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 5.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Node.js unzipper, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Node.js unzipper's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Node.js unzipper's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No Node.js unzipper CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Node.js unzipper version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.8.131 CVE

Fixed in

0.8.131 CVE

Find a version

1 CVE

Sort

Medium vulnerability · 2018-07-25
CVE-2018-1002203
Patch
CWE-22
Medium · CVSS 5.5
EPSS 11.9% (96th pct)2018-07-25

Common weakness types

The CWE weakness categories most often found in Node.js unzipper CVEs. Follow any weakness for its full explanation.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVE

Other Node.js products

Browse vulnerabilities for other products by Node.js.

Node.js23 CVEs adm-zip1 CVEs node1 CVEs Node.js v24.x1 CVEs

All Node.js vulnerabilities

Frequently asked questions

Common questions about Node.js unzipper vulnerabilities.

How many CVEs does Node.js unzipper have?: Node.js unzipper has 1 published CVE records since 2018.
How many Node.js unzipper CVEs are in CISA KEV?: None of Node.js unzipper's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Node.js unzipper vulnerabilities?: No Node.js unzipper CVEs currently have a tracked public exploit in this dataset.
Which versions of Node.js unzipper are affected?: 2 distinct Node.js unzipper versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Node.js unzipper CVEs?: Node.js unzipper's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
What is the average severity of Node.js unzipper CVEs?: The average CVSS base score across Node.js unzipper's scored CVEs is 5.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Node.js unzipper vulnerabilities

Monitor new Node.js unzipper vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing