Arbitrary File Write Vulnerability in extract-zip: CVE-2026-19693
A high-severity vulnerability (CVE-2026-19693, CVSS 8.1) exists in the extract-zip package, allowing for arbitrary file writes outside the intended destination directory. This issue, classified as CWE-22 and CWE-59, affects versions up to 2.0.1 and has a significant impact on data integrity and availability. Immediate patching is recommended to prevent potential exploitation.