feross / feross/cross-zip

High Severity CVE in cross-zip

Open
#39 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
JavaScript
Stars
129
Forks
24
PR merge metrics
No merged PRs in 30d

Description

Hello folks!

It looks like as of last week, there is a high severity CVE in `cross-zip`.

CVE advisories:

https://github.com/advisories/GHSA-gj5f-73vh-wpf7
https://security.snyk.io/vuln/SNYK-JS-CROSSZIP-6105396
https://nvd.nist.gov/vuln/detail/CVE-2025-11569

Just bringing it to the teams attention!

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.