All pull requests

Pull requests

• fix: CVE-2026-56876 and CVE-2026-19693 prevent symlink entries from escaping the target directory

  #162·Mansour-J-linz opened Sep 9, 2026·

  ·
  5

• fix: reject writes through a symlink at the entry's final path component (CVE-2026-19693)

  #160·sealbenb opened Aug 17, 2026·

  ·

• Reject out-of-bound symlink targets

  #158·alehlopeh opened Aug 14, 2026·

  ·

• fix: moderate severity vulnerability

  #151·hirehamir opened Mar 13, 2026·

  ·
  1

• fix fs.promises.realpath for long paths on Windows

  #144·WanGe2000 opened Oct 23, 2024·

  ·
  1

• Closes #124

  #127·n0n3br opened Oct 2, 2021·

  ·
  1

• feat: add extractBuffer() function

  #122·ckerr opened Mar 30, 2021·

  ·
  1

• fix: allow relative paths as target folder name

  #118·martinheidegger opened Feb 12, 2021·

  ·

• feat: adding programatic filter to exclude/change file paths

  #117·martinheidegger opened Feb 12, 2021·

  ·
  1

• feat: adding support for filename encodings

  #116·martinheidegger opened Feb 12, 2021·

  ·

• do not create target directory if root directory

  #113·superigno opened Nov 30, 2020·

  ·
  3

• Allow extracting from buffers by only using yauzl.open if it's a string.

  #108·foxt opened Aug 20, 2020·

  ·

• supports done([error]) as optional parameter for onEntry

  #69·mikebq opened Apr 6, 2018·

  ·

• Add support for strip option

  #26·vilicvane opened May 27, 2016·

  ·
  1

• Overwrite Option

  #21·marwanhilmi opened Jan 21, 2016·

  ·
  3