adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-114102 · Microsoft / collected KEV context

EUVD-2026-106905

GHSA-f9g8-qp78-x5c2

GHSA-8238-w5pm-2374

cve-program · CVE-2026-114102

• https://github.com/cthackers/adm-zip/security/advisories/GHSA-8238-w5pm-2374
• https://www.vulncheck.com/advisories/adm-zip-before-0.6.1-denial-of-service-via-inflateasync-unhandled-error-event

euvd · EUVD-2026-106905

• https://github.com/cthackers/adm-zip/security/advisories/GHSA-8238-w5pm-2374
• https://www.vulncheck.com/advisories/adm-zip-before-0.6.1-denial-of-service-via-inflateasync-unhandled-error-event

nvd · CVE-2026-114102

• https://github.com/cthackers/adm-zip/security/advisories/GHSA-8238-w5pm-2374
• https://www.vulncheck.com/advisories/adm-zip-before-0.6.1-denial-of-service-via-inflateasync-unhandled-error-event

osv · GHSA-8238-w5pm-2374

• https://github.com/cthackers/adm-zip/security/advisories/GHSA-8238-w5pm-2374
• https://github.com/cthackers/adm-zip/commit/5e70d3a26097d68fa981c41f022c053117174e49
• https://github.com/cthackers/adm-zip
• https://github.com/cthackers/adm-zip/releases/tag/v0.6.1

No related operational record is retained in the current change model.