René's URL Explorer Experiment


Title: zlib: validate central directory record count by mcollina · Pull Request #65002 · nodejs/node · GitHub

Open Graph Title: zlib: validate central directory record count by mcollina · Pull Request #65002 · nodejs/node

X Title: zlib: validate central directory record count by mcollina · Pull Request #65002 · nodejs/node

Description: Node.js JavaScript runtime ✨🐢🚀✨. Contribute to nodejs/node development by creating an account on GitHub.

Open Graph Description: ZIP readers trusted the EOCD record count without checking that the parsed headers consumed the declared central directory size. Reject archives whose record count leaves central directory bytes un...

X Description: ZIP readers trusted the EOCD record count without checking that the parsed headers consumed the declared central directory size. Reject archives whose record count leaves central directory bytes un...

Opengraph URL: https://github.com/nodejs/node/pull/65002

X: @github

direct link

Domain: github.com

react-profiling0
react-import-mapreact,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf
route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:1fe1a565-cec6-68ba-385e-501b7865528a
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idB1F4:125BB0:505D0E:67E21E:6AED2555
html-safe-noncefcb20c92070889d92ca4991aeb2ef7f21e81d712d495137920cd1c43de94197f
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJCMUY0OjEyNUJCMDo1MDVEMEU6NjdFMjFFOjZBRUQyNTU1IiwidmlzaXRvcl9pZCI6IjUzNjY5NDMzNTc2NTkzMjU3ODEiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmac02fd9c2aa8e96b4ba5386c8d8ba6cb79636ef46c5a0c38741a965160323b8fa9
hovercard-subject-tagpull_request:4201411120
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/nodejs/node/65002/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/7cfdd61ad253fad3e44c2d33202570d18cb7ec29fcf2393a309e0ec53cc120a9/nodejs/node/pull/65002
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/7cfdd61ad253fad3e44c2d33202570d18cb7ec29fcf2393a309e0ec53cc120a9/nodejs/node/pull/65002
og:image:altZIP readers trusted the EOCD record count without checking that the parsed headers consumed the declared central directory size. Reject archives whose record count leaves central directory bytes un...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernamemcollina
hostnamegithub.com
expected-hostnamegithub.com
None9d95365dda0576efe9b71f45807595e396bd0ca9286fba5367a05048e6ddf8f2
turbo-cache-controlno-cache
go-importgithub.com/nodejs/node git https://github.com/nodejs/node.git
octolytics-dimension-user_id9950313
octolytics-dimension-user_loginnodejs
octolytics-dimension-repository_id27193779
octolytics-dimension-repository_nwonodejs/node
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id27193779
octolytics-dimension-repository_network_root_nwonodejs/node
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release98b41fa4b5635ceb45a4c54320fced73817ff290
ui-targetfull
theme-color#1e2327
color-schemelight dark
react-app-namepull-requests

Links:

Skip to contenthttps://github.com/nodejs/node/pull/65002#start-of-content
https://github.com/
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F65002
GitHubRepository hosting, code review, and collaborationhttps://github.com/platform
CopilotAI coding agent for tasks, projects, and automated workhttps://github.com/features/copilot
ActionsCI/CD and automationhttps://github.com/features/actions
Code QualityQuality analysis, fixes, and enforcementhttps://github.com/features/code-quality
CodespacesCloud development environmentshttps://github.com/features/codespaces
Code SecurityVulnerability detection and remediationhttps://github.com/security/advanced-security/code-security
Secret ProtectionSecret scanning and leak preventionhttps://github.com/security/advanced-security/secret-protection
All Featureshttps://github.com/features
Documentationhttps://docs.github.com/en
Traininghttps://learn.github.com/skills
Certificationshttps://learn.github.com/credentials
Build with Copilothttps://github.com/features/ai
Customize Copilothttps://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview
Integrationshttps://github.com/marketplace
Trending reposhttps://github.com/trending
GitHub Sponsorshttps://github.com/open-source/sponsors
Developer articleshttps://github.com/resources/articles
ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place.https://github.blog/changelog/
Enterpriseshttps://github.com/enterprise
Teamhttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
See all industrieshttps://github.com/solutions/industry
Why GitHubhttps://github.com/why-github
Customer Storieshttps://github.com/customer-stories
Business insightshttps://github.com/solutions/executive-insights
Trust Centerhttps://github.com/trust-center
GitHub Advanced SecurityEnterprise-grade code securityhttps://github.com/security/advanced-security
Copilot for businessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Documentationhttps://docs.github.com/en
Resource centerhttps://github.com/resources
Bloghttps://github.blog/
Events & webinarshttps://github.com/resources/events
Community Forumhttps://github.com/orgs/community/discussions
Customer Storieshttps://github.com/customer-stories
Integrationshttps://github.com/marketplace
Customer supporthttps://help.github.com/
Traininghttps://learn.github.com/skills
GitHub Statushttps://www.githubstatus.com/
Abouthttps://github.com/about
Partnershttps://github.com/partners
Changeloghttps://github.blog/changelog/
GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub.https://githubuniverse.com/
Pricinghttps://github.com/pricing
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F65002
Sign uphttps://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=nodejs%2Fnode
Reloadhttps://github.com/nodejs/node/pull/65002
Reloadhttps://github.com/nodejs/node/pull/65002
Reloadhttps://github.com/nodejs/node/pull/65002
nodejshttps://github.com/nodejs
nodehttps://github.com/nodejs/node
Codehttps://github.com/nodejs/node
Issues657 (657)https://github.com/nodejs/node/issues
Pull requests666 (666)https://github.com/nodejs/node/pulls
Actionshttps://github.com/nodejs/node/actions
Projectshttps://github.com/nodejs/node/projects
Security and qualityhttps://github.com/nodejs/node/security
Insightshttps://github.com/nodejs/node/pulse
https://github.com/nodejs/node
aduh95https://github.com/aduh95
nodejs:mainhttps://github.com/nodejs/node/tree/main
mcollina:fix-zlib-zip-central-directory-counthttps://github.com/mcollina/node/tree/fix-zlib-zip-central-directory-count
Conversationhttps://github.com/nodejs/node/pull/65002
Commits1 (1)https://github.com/nodejs/node/pull/65002/commits
Checkshttps://github.com/nodejs/node/pull/65002/checks
Files changedhttps://github.com/nodejs/node/pull/65002/files
zlib: validate central directory record counthttps://github.com/nodejs/node/pull/65002#top
aduh95https://github.com/aduh95
nodejs:mainhttps://github.com/nodejs/node/tree/main
mcollina:fix-zlib-zip-central-directory-counthttps://github.com/mcollina/node/tree/fix-zlib-zip-central-directory-count
https://github.com/mcollina
mcollinahttps://github.com/mcollina
Aug 4, 2026https://github.com/nodejs/node/pull/65002#issue-5058212775
Please reload this pagehttps://github.com/nodejs/node/pull/65002
https://github.com/mcollina
zlib: validate central directory record counthttps://github.com/nodejs/node/pull/65002/commits/3469b1ba340c09a46149d1f1a806dc4877e34491
3469b1bhttps://github.com/nodejs/node/pull/65002/commits/3469b1ba340c09a46149d1f1a806dc4877e34491
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
needs-ci https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Aneeds-ci
Aug 4, 2026https://github.com/nodejs/node/pull/65002#event-28935445150
https://github.com/mcollina
mcollinahttps://github.com/mcollina
aduh95https://github.com/aduh95
August 4, 2026 08:26https://github.com/nodejs/node/pull/65002#event-28936300913
https://github.com/pipobscure
pipobscurehttps://github.com/pipobscure
Aug 4, 2026https://github.com/nodejs/node/pull/65002#issuecomment-5176819023
Please reload this pagehttps://github.com/nodejs/node/pull/65002
https://github.com/mcollina
mcollinahttps://github.com/mcollina
ShogunPandahttps://github.com/ShogunPanda
anonrighttps://github.com/anonrig
jasnellhttps://github.com/jasnell
August 4, 2026 09:18https://github.com/nodejs/node/pull/65002#event-28938841267
https://github.com/apps/codecov
codecovhttps://github.com/apps/codecov
Aug 4, 2026https://github.com/nodejs/node/pull/65002#issuecomment-5177329741
Please reload this pagehttps://github.com/nodejs/node/pull/65002
Codecovhttps://app.codecov.io/gh/nodejs/node/pull/65002?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
f43086dhttps://app.codecov.io/gh/nodejs/node/commit/f43086d1e4d67e0a19e08da146a889b7b11e105a?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
3469b1bhttps://app.codecov.io/gh/nodejs/node/commit/3469b1ba340c09a46149d1f1a806dc4877e34491?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
Files with missing lineshttps://app.codecov.io/gh/nodejs/node/pull/65002?dropdown=coverage&src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
lib/internal/zip/entry.jshttps://app.codecov.io/gh/nodejs/node/pull/65002?src=pr&el=tree&filepath=lib%2Finternal%2Fzip%2Fentry.js&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs#diff-bGliL2ludGVybmFsL3ppcC9lbnRyeS5qcw==
lib/internal/zip/headers.jshttps://app.codecov.io/gh/nodejs/node/pull/65002?src=pr&el=tree&filepath=lib%2Finternal%2Fzip%2Fheaders.js&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs#diff-bGliL2ludGVybmFsL3ppcC9oZWFkZXJzLmpz
39 files with indirect coverage changeshttps://app.codecov.io/gh/nodejs/node/pull/65002/indirect-changes?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
Test Analyticshttps://docs.codecov.com/docs/test-analytics
JS Bundle Analysishttps://docs.codecov.com/docs/javascript-bundle-analysis
Please reload this pagehttps://github.com/nodejs/node/pull/65002
https://github.com/pipobscure
pipobscurehttps://github.com/pipobscure
Aug 5, 2026 https://github.com/nodejs/node/pull/65002#ref-pullrequest-5061475694
zlib: harden ZIP archive reading and writing against malicious input #65016 https://github.com/nodejs/node/pull/65016
https://github.com/panva
panvahttps://github.com/panva
Aug 5, 2026 https://github.com/nodejs/node/pull/65002#pullrequestreview-4862545070
View reviewed changes https://github.com/nodejs/node/pull/65002/files/3469b1ba340c09a46149d1f1a806dc4877e34491
https://github.com/aduh95
aduh95https://github.com/aduh95
author ready https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3A%22author%20ready%22
request-ci https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Arequest-ci
Aug 5, 2026https://github.com/nodejs/node/pull/65002#event-29014778666
https://github.com/aduh95
aduh95https://github.com/aduh95
Aug 5, 2026 https://github.com/nodejs/node/pull/65002#pullrequestreview-4865468756
View reviewed changes https://github.com/nodejs/node/pull/65002/files/3469b1ba340c09a46149d1f1a806dc4877e34491
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
request-ci https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Arequest-ci
Aug 5, 2026https://github.com/nodejs/node/pull/65002#event-29015557175
https://github.com/nodejs-github-bot
Sign in to viewhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F65002
https://github.com/nodejs-github-bot
Sign in to viewhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F65002
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
Aug 6, 2026https://github.com/nodejs/node/pull/65002#issuecomment-5203712108
https://ci.nodejs.org/job/node-test-pull-request/75558/https://ci.nodejs.org/job/node-test-pull-request/75558/
Please reload this pagehttps://github.com/nodejs/node/pull/65002
https://github.com/trivikr
trivikrhttps://github.com/trivikr
zlib https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Azlib
Aug 7, 2026https://github.com/nodejs/node/pull/65002#event-29099075309
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
Aug 12, 2026https://github.com/nodejs/node/pull/65002#issuecomment-5262090892
https://ci.nodejs.org/job/node-test-pull-request/75791/https://ci.nodejs.org/job/node-test-pull-request/75791/
Please reload this pagehttps://github.com/nodejs/node/pull/65002
https://github.com/aduh95
aduh95https://github.com/aduh95
00f0f8chttps://github.com/nodejs/node/commit/00f0f8cf8acced9e9e6f7256955a1480c98fb1e8
Aug 12, 2026https://github.com/nodejs/node/pull/65002#event-29329754371
Please reload this pagehttps://github.com/nodejs/node/pull/65002
https://github.com/aduh95
aduh95https://github.com/aduh95
Aug 12, 2026https://github.com/nodejs/node/pull/65002#issuecomment-5264630465
00f0f8chttps://github.com/nodejs/node/commit/00f0f8cf8acced9e9e6f7256955a1480c98fb1e8
Please reload this pagehttps://github.com/nodejs/node/pull/65002
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65002#ref-commit-4b2254b
https://github.com/mcollina
https://github.com/aduh95
zlib: validate central directory record counthttps://github.com/nodejs/node/commit/4b2254b88d2ed59b075c08141ae4aaea001ade2c
4b2254bhttps://github.com/nodejs/node/commit/4b2254b88d2ed59b075c08141ae4aaea001ade2c
#65002https://github.com/nodejs/node/pull/65002
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65002#ref-commit-575260d
https://github.com/mcollina
https://github.com/aduh95
zlib: validate central directory record counthttps://github.com/nodejs/node/commit/575260d3b4f1e2476375af10a0cdd0ac8485355c
575260dhttps://github.com/nodejs/node/commit/575260d3b4f1e2476375af10a0cdd0ac8485355c
#65002https://github.com/nodejs/node/pull/65002
https://github.com/aduh95
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65002#ref-pullrequest-5251528519
2026-08-26, Version 26.8.0 (Current) #65551 https://github.com/nodejs/node/pull/65551
https://github.co/hiddenchars
https://github.com/nodejs/node/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F65002
https://github.com/panva
panva https://github.com/panva
https://github.com/nodejs/node/pull/65002/files/3469b1ba340c09a46149d1f1a806dc4877e34491
https://github.com/aduh95
aduh95 https://github.com/aduh95
https://github.com/nodejs/node/pull/65002/files/3469b1ba340c09a46149d1f1a806dc4877e34491
https://github.com/jasnell
jasnell https://github.com/jasnell
https://github.com/anonrig
anonrig https://github.com/anonrig
https://github.com/ShogunPanda
ShogunPanda https://github.com/ShogunPanda
Please reload this pagehttps://github.com/nodejs/node/pull/65002
author ready https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3A%22author%20ready%22
needs-ci https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Aneeds-ci
zlib https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Azlib
Please reload this pagehttps://github.com/nodejs/node/pull/65002
https://github.com/mcollina
https://github.com/pipobscure
https://github.com/nodejs-github-bot
https://github.com/aduh95
https://github.com/panva
https://github.com/trivikr
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.