Vulnerabilities

 2 via 117 paths

Dependencies

 410

Source

 GitHub

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
Issue type
  • 2
  • 1
Severity
  • 1
  • 2
Status
  • 3
  • 0
  • 0

high severity

GPL-3.0 license

  • Module: idcac-playwright
  • Introduced through: crawlee@3.18.2

Detailed paths

  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › idcac-playwright@0.2.0

GPL-3.0 license

GPL-3.0 license vulnerability report

medium severity
new

Asymmetric Resource Consumption (Amplification)

  • Vulnerable module: minimatch
  • Introduced through: crawlee@3.18.2

Detailed paths

  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/http@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/cheerio@3.18.2 › @crawlee/http@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/jsdom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/linkedom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/cheerio@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/jsdom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/linkedom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › minimatch@9.0.9

Overview

minimatch is a minimal matching utility.

Affected versions of this package are vulnerable to Asymmetric Resource Consumption (Amplification) in the firstPhasePreProcess method, where the **/.. transform clones a globParts entry and pushes the clone back onto the same array inside a do...while (didSomething) fixpoint loop. An attacker can exhaust CPU and memory by supplying a glob pattern whose **/.. sequences regenerate entries during preprocessing, which secondPhasePreProcess then compares in an O(n^2) pairwise partsMatch pass over the expanded set. Exploitation requires the pattern to be parsed with optimizationLevel set to 2 or higher.

Remediation

Upgrade minimatch to version 11.0.1 or higher.

References

Asymmetric Resource Consumption (Amplification) vulnerability report

medium severity
new

Interpretation Conflict

  • Vulnerable module: adm-zip
  • Introduced through: crawlee@3.18.2

Detailed paths

  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/basic@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/http@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-generator@2.1.90 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-injector@2.1.90 › fingerprint-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/http@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/cheerio@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/jsdom@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/linkedom@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/http@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/cheerio@3.18.2 › @crawlee/http@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/jsdom@3.18.2 › @crawlee/http@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/linkedom@3.18.2 › @crawlee/http@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-injector@2.1.90 › fingerprint-generator@2.1.90 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-generator@2.1.90 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-generator@2.1.90 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-generator@2.1.90 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-injector@2.1.90 › fingerprint-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-injector@2.1.90 › fingerprint-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-injector@2.1.90 › fingerprint-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/http@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/cheerio@3.18.2 › @crawlee/http@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/jsdom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/linkedom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/cheerio@3.18.2 › @crawlee/http@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/jsdom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/linkedom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/cheerio@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/jsdom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/linkedom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-injector@2.1.90 › fingerprint-generator@2.1.90 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-injector@2.1.90 › fingerprint-generator@2.1.90 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-injector@2.1.90 › fingerprint-generator@2.1.90 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-generator@2.1.90 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-generator@2.1.90 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-injector@2.1.90 › fingerprint-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-injector@2.1.90 › fingerprint-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/cheerio@3.18.2 › @crawlee/http@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/jsdom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/linkedom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/cheerio@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/jsdom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/linkedom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/cheerio@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/jsdom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/linkedom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-injector@2.1.90 › fingerprint-generator@2.1.90 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › fingerprint-injector@2.1.90 › fingerprint-generator@2.1.90 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/cheerio@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/jsdom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/linkedom@3.18.2 › @crawlee/http@3.18.2 › @crawlee/basic@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/playwright@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1
  • Introduced through: @houtini/seo-crawler-mcp@houtini-ai/seo-crawler-mcp › crawlee@3.18.2 › @crawlee/puppeteer@3.18.2 › @crawlee/browser@3.18.2 › @crawlee/browser-pool@3.18.2 › @crawlee/core@3.18.2 › @crawlee/utils@3.18.2 › got-scraping@4.2.2 › header-generator@2.1.90 › generative-bayesian-network@2.1.90 › adm-zip@0.6.1

Overview

adm-zip is a JavaScript implementation for zip data compression for NodeJS.

Affected versions of this package are vulnerable to Interpretation Conflict via canonically equivalent ZIP entry names (e.g., ./hello.txt and hello.txt), which causes readEntries() to treat them as distinct entries while extractAllTo() resolves them to the same filesystem path. An attacker can craft a ZIP archive where getEntry() or readAsText() validates benign content from one entry while extractAllTo() subsequently writes malicious content from a duplicate entry to the same path, bypassing integrity checks.

Remediation

There is no fixed version for adm-zip.

References

Interpretation Conflict vulnerability report