CVE-2026-77301Published
adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-77301 · Microsoft / collected KEV context
cve-program · CVE-2026-77301
- https://github.com/cthackers/adm-zip/security/advisories/GHSA-7q85-xj36-vmfc
- https://github.com/cthackers/adm-zip/commit/491600683dacb6cb9fe0718a0eeb9cb5eb49afa6
- https://github.com/cthackers/adm-zip/releases/tag/v0.6.1
euvd · EUVD-2026-83170
- https://github.com/cthackers/adm-zip/security/advisories/GHSA-7q85-xj36-vmfc
- https://github.com/cthackers/adm-zip/commit/491600683dacb6cb9fe0718a0eeb9cb5eb49afa6
- https://github.com/cthackers/adm-zip/releases/tag/v0.6.1
nvd · CVE-2026-77301
- https://github.com/cthackers/adm-zip/commit/491600683dacb6cb9fe0718a0eeb9cb5eb49afa6
- https://github.com/cthackers/adm-zip/releases/tag/v0.6.1
- https://github.com/cthackers/adm-zip/security/advisories/GHSA-7q85-xj36-vmfc
osv · GHSA-7q85-xj36-vmfc
Related operational evidence
Explicit CVE identifiers- adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData() in zipEntry.js trusts an entry's central-directory uncompressed size and allocates output memory before validating that value aga… · Advisory content revised · 9 Nov 2026
- adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData() in zipEntry.js trusts an entry's central-directory uncompressed size and allocates output memory before validating that value aga… · Advisory content revised · 7 Nov 2026
- adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData() in zipEntry.js trusts an entry's central-directory uncompressed size and allocates output memory before validating that value aga… · Advisory content revised · 1 Nov 2026