Tuleap Community Edition development and releases are no longer public. You have until September 30th to download packages and sources in Tuleap project. You can contact the team if you need further assistance.

    •  
      request #47796 Silence temporarily extract-zip CVE-2026-56876
    Infos
    #47796
    Clarisse Deschamps (cdeschamps)
    2026-08-14 11:50
    2026-08-13 16:59
    49544
    Details
    Silence temporarily extract-zip CVE-2026-56876

    No fixed version published yet. extract-zip is only used by Cypress.

    I first tried to remove it from the dependencies, but it seems that Cypress doesn't work without it.

    https://github.com/ziad626/extract-zip-security-research/security/advisories/GHSA-x7jf-2287-qcpf

    Dependencies
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Clarisse Deschamps (cdeschamps)
    Closed
    2026-08-14
    Attachments
    Empty
    References
    Referenced by request #47796

    Follow-ups