fflate vulnerabilities

CVEs whose affected-version data names the fflate package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-122146High· 7.3PoC

2d ago

101arrowz fflate index.mjs unzipSync memory corruption

A weakness has been identified in 101arrowz fflate up to 0.8.3. This issue affects the function unzipSync of the file esm/index.mjs. This manipulation causes memory corruption. It is possible to initiate the attack remotely. The exploit …

▾ Midnight101arrowz · fflateEPSS 0.29%via CVEORG