Known Vulnerabilities for Decompress by Kevva
Listed below are 10 of the newest known vulnerabilities associated with "Decompress" by "Kevva".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-113613 json | FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write ... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-110641 json | @runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute c... | Not Provided | 2026-10-14 | 2026-10-20 |
| CVE-2026-108750 json | OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust PHP me... | Not Provided | 2026-10-11 | 2026-10-14 |
| CVE-2026-107709 json | A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in `lib/decomp... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-107692 json | The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after the TCP ... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-106117 json | ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TIFF using CCITT Group 3 or Modified Huffman co... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-106111 json | ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-105274 json | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted reposito... | Not Provided | 2026-10-12 | 2026-10-15 |
| CVE-2026-101894 json | The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output) API r... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-98158 json | In the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resetting i... | Not Provided | 2026-09-25 | 2026-10-19 |