CVE-2026-10732 | decompress ZIP path traversal (SNYK-JS-DECOMPRESS-16415209)

A vulnerability was found in decompress. It has been rated as problematic. This affects an unknown part of the component ZIP Handler. Performing a manipulation results in path traversal: ‘..filename’.

This vulnerability is known as CVE-2026-10732. Remote exploitation of the attack is possible. No exploit is available.