Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #47796 Silence temporarily extract-zip CVE-2026-56876
    Infos
    #47796
    Clarisse Deschamps (cdeschamps)
    2026-08-14 11:50
    2026-08-13 16:59
    49540
    Details
    Silence temporarily extract-zip CVE-2026-56876

    No fixed version published yet. extract-zip is only used by Cypress.

    I first tried to remove it from the dependencies, but it seems that Cypress doesn't work without it.

    https://github.com/ziad626/extract-zip-security-research/security/advisories/GHSA-x7jf-2287-qcpf

    Dependencies
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Clarisse Deschamps (cdeschamps)
    Closed
    2026-08-14
    Attachments
    Empty
    References
    Referenced by request #47796

    Artifact

    rel #47138 17.6
    Display settings

    Follow-ups