René's URL Explorer Experiment


Title: zlib: harden ZIP archive reading and writing against malicious input by pipobscure · Pull Request #65016 · nodejs/node · GitHub

Open Graph Title: zlib: harden ZIP archive reading and writing against malicious input by pipobscure · Pull Request #65016 · nodejs/node

X Title: zlib: harden ZIP archive reading and writing against malicious input by pipobscure · Pull Request #65016 · nodejs/node

Description: Node.js JavaScript runtime ✨🐢🚀✨. Contribute to nodejs/node development by creating an account on GitHub.

Open Graph Description: Summary This PR fixes four security issues in the node:zlib ZIP support (ZipEntry/ZipFile/ZipBuffer), found by an audit of the parser and the on-disk reader/writer. Two are high-severity (a parser-...

X Description: Summary This PR fixes four security issues in the node:zlib ZIP support (ZipEntry/ZipFile/ZipBuffer), found by an audit of the parser and the on-disk reader/writer. Two are high-severity (a parser-...

Opengraph URL: https://github.com/nodejs/node/pull/65016

X: @github

direct link

Domain: github.com

react-profiling0
react-import-mapreact,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf
route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:8b577960-f2ab-9702-f3bc-216b359a4ce2
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id8B26:19E603:244E5E:2F86A8:6AED1907
html-safe-nonce9fa32f7038a70e80e0fedc6446fcdabc1b0d1921583f853ebeea669a9cf55931
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4QjI2OjE5RTYwMzoyNDRFNUU6MkY4NkE4OjZBRUQxOTA3IiwidmlzaXRvcl9pZCI6IjgxOTA2NTMyNTk3Njg5OTQwNTUiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmaca3c3e46d66402bdac7d0e0de87dc6154475eb4b2c68ea82743198ea0faff6888
hovercard-subject-tagpull_request:4204212200
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/nodejs/node/65016/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/e359cfdffdfb1f41db87f84098cd1861f8132c760eb0f8ebf6edf2e13928ac34/nodejs/node/pull/65016
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/e359cfdffdfb1f41db87f84098cd1861f8132c760eb0f8ebf6edf2e13928ac34/nodejs/node/pull/65016
og:image:altSummary This PR fixes four security issues in the node:zlib ZIP support (ZipEntry/ZipFile/ZipBuffer), found by an audit of the parser and the on-disk reader/writer. Two are high-severity (a parser-...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernamepipobscure
hostnamegithub.com
expected-hostnamegithub.com
None120085d0bcec1f427e3ab45302c8b95f873d26ad21984dc86d62ab2c10158f41
turbo-cache-controlno-cache
go-importgithub.com/nodejs/node git https://github.com/nodejs/node.git
octolytics-dimension-user_id9950313
octolytics-dimension-user_loginnodejs
octolytics-dimension-repository_id27193779
octolytics-dimension-repository_nwonodejs/node
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id27193779
octolytics-dimension-repository_network_root_nwonodejs/node
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
releasee12fd03aa775dceadc5a793c3a0791e43ca256bb
ui-targetfull
theme-color#1e2327
color-schemelight dark
react-app-namepull-requests

Links:

Skip to contenthttps://github.com/nodejs/node/pull/65016#start-of-content
https://github.com/
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F65016
GitHubRepository hosting, code review, and collaborationhttps://github.com/platform
CopilotAI coding agent for tasks, projects, and automated workhttps://github.com/features/copilot
ActionsCI/CD and automationhttps://github.com/features/actions
Code QualityQuality analysis, fixes, and enforcementhttps://github.com/features/code-quality
CodespacesCloud development environmentshttps://github.com/features/codespaces
Code SecurityVulnerability detection and remediationhttps://github.com/security/advanced-security/code-security
Secret ProtectionSecret scanning and leak preventionhttps://github.com/security/advanced-security/secret-protection
All Featureshttps://github.com/features
Documentationhttps://docs.github.com/en
Traininghttps://learn.github.com/skills
Certificationshttps://learn.github.com/credentials
Build with Copilothttps://github.com/features/ai
Customize Copilothttps://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview
Integrationshttps://github.com/marketplace
Trending reposhttps://github.com/trending
GitHub Sponsorshttps://github.com/open-source/sponsors
Developer articleshttps://github.com/resources/articles
ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place.https://github.blog/changelog/
Enterpriseshttps://github.com/enterprise
Teamhttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
See all industrieshttps://github.com/solutions/industry
Why GitHubhttps://github.com/why-github
Customer Storieshttps://github.com/customer-stories
Business insightshttps://github.com/solutions/executive-insights
Trust Centerhttps://github.com/trust-center
GitHub Advanced SecurityEnterprise-grade code securityhttps://github.com/security/advanced-security
Copilot for businessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Documentationhttps://docs.github.com/en
Resource centerhttps://github.com/resources
Bloghttps://github.blog/
Events & webinarshttps://github.com/resources/events
Community Forumhttps://github.com/orgs/community/discussions
Customer Storieshttps://github.com/customer-stories
Integrationshttps://github.com/marketplace
Customer supporthttps://help.github.com/
Traininghttps://learn.github.com/skills
GitHub Statushttps://www.githubstatus.com/
Abouthttps://github.com/about
Partnershttps://github.com/partners
Changeloghttps://github.blog/changelog/
GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub.https://githubuniverse.com/
Pricinghttps://github.com/pricing
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F65016
Sign uphttps://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=nodejs%2Fnode
Reloadhttps://github.com/nodejs/node/pull/65016
Reloadhttps://github.com/nodejs/node/pull/65016
Reloadhttps://github.com/nodejs/node/pull/65016
nodejshttps://github.com/nodejs
nodehttps://github.com/nodejs/node
Codehttps://github.com/nodejs/node
Issues655 (655)https://github.com/nodejs/node/issues
Pull requests666 (666)https://github.com/nodejs/node/pulls
Actionshttps://github.com/nodejs/node/actions
Projectshttps://github.com/nodejs/node/projects
Security and qualityhttps://github.com/nodejs/node/security
Insightshttps://github.com/nodejs/node/pulse
https://github.com/nodejs/node
pipobscurehttps://github.com/pipobscure
nodejs:mainhttps://github.com/nodejs/node/tree/main
pipobscure:zip-security-fixeshttps://github.com/pipobscure/node/tree/zip-security-fixes
Conversationhttps://github.com/nodejs/node/pull/65016
Commits6 (6)https://github.com/nodejs/node/pull/65016/commits
Checkshttps://github.com/nodejs/node/pull/65016/checks
Files changedhttps://github.com/nodejs/node/pull/65016/files
zlib: harden ZIP archive reading and writing against malicious inputhttps://github.com/nodejs/node/pull/65016#top
pipobscurehttps://github.com/pipobscure
nodejs:mainhttps://github.com/nodejs/node/tree/main
pipobscure:zip-security-fixeshttps://github.com/pipobscure/node/tree/zip-security-fixes
https://github.com/pipobscure
pipobscurehttps://github.com/pipobscure
Aug 4, 2026https://github.com/nodejs/node/pull/65016#issue-5061475694
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
needs-ci https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Aneeds-ci
Aug 4, 2026https://github.com/nodejs/node/pull/65016#event-28954342967
https://github.com/mcollina
mcollinahttps://github.com/mcollina
Aug 4, 2026 https://github.com/nodejs/node/pull/65016#pullrequestreview-4855721858
View reviewed changes https://github.com/nodejs/node/pull/65016/files
mcollinahttps://github.com/mcollina
https://github.com/nodejs/node/pull/65016#pullrequestreview-4855721858
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/richardlau
richardlauhttps://github.com/richardlau
commit-queue-rebase https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acommit-queue-rebase
request-ci https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Arequest-ci
Aug 4, 2026https://github.com/nodejs/node/pull/65016#event-28959691773
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
request-ci https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Arequest-ci
Aug 4, 2026https://github.com/nodejs/node/pull/65016#event-28960388112
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
Aug 4, 2026https://github.com/nodejs/node/pull/65016#issuecomment-5181531708
https://ci.nodejs.org/job/node-test-pull-request/75467/https://ci.nodejs.org/job/node-test-pull-request/75467/
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/apps/codecov
codecovhttps://github.com/apps/codecov
Aug 4, 2026https://github.com/nodejs/node/pull/65016#issuecomment-5181871768
Please reload this pagehttps://github.com/nodejs/node/pull/65016
Codecovhttps://app.codecov.io/gh/nodejs/node/pull/65016?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
2f65b90https://app.codecov.io/gh/nodejs/node/commit/2f65b902d80c708c1c05d8d402582d155832e989?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
0729e5chttps://app.codecov.io/gh/nodejs/node/commit/0729e5c7f80edcc83659ab1747d917af694140e5?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
Files with missing lineshttps://app.codecov.io/gh/nodejs/node/pull/65016?dropdown=coverage&src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
lib/internal/zip/file.jshttps://app.codecov.io/gh/nodejs/node/pull/65016?src=pr&el=tree&filepath=lib%2Finternal%2Fzip%2Ffile.js&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs#diff-bGliL2ludGVybmFsL3ppcC9maWxlLmpz
30 Missing ⚠️ https://app.codecov.io/gh/nodejs/node/pull/65016?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
lib/internal/zip/entry.jshttps://app.codecov.io/gh/nodejs/node/pull/65016?src=pr&el=tree&filepath=lib%2Finternal%2Fzip%2Fentry.js&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs#diff-bGliL2ludGVybmFsL3ppcC9lbnRyeS5qcw==
4 Missing ⚠️ https://app.codecov.io/gh/nodejs/node/pull/65016?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
Files with missing lineshttps://app.codecov.io/gh/nodejs/node/pull/65016?dropdown=coverage&src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
lib/internal/zip/archive.jshttps://app.codecov.io/gh/nodejs/node/pull/65016?src=pr&el=tree&filepath=lib%2Finternal%2Fzip%2Farchive.js&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs#diff-bGliL2ludGVybmFsL3ppcC9hcmNoaXZlLmpz
lib/internal/zip/headers.jshttps://app.codecov.io/gh/nodejs/node/pull/65016?src=pr&el=tree&filepath=lib%2Finternal%2Fzip%2Fheaders.js&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs#diff-bGliL2ludGVybmFsL3ppcC9oZWFkZXJzLmpz
lib/internal/zip/entry.jshttps://app.codecov.io/gh/nodejs/node/pull/65016?src=pr&el=tree&filepath=lib%2Finternal%2Fzip%2Fentry.js&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs#diff-bGliL2ludGVybmFsL3ppcC9lbnRyeS5qcw==
lib/internal/zip/file.jshttps://app.codecov.io/gh/nodejs/node/pull/65016?src=pr&el=tree&filepath=lib%2Finternal%2Fzip%2Ffile.js&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs#diff-bGliL2ludGVybmFsL3ppcC9maWxlLmpz
34 files with indirect coverage changeshttps://app.codecov.io/gh/nodejs/node/pull/65016/indirect-changes?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
Test Analyticshttps://docs.codecov.com/docs/test-analytics
JS Bundle Analysishttps://docs.codecov.com/docs/javascript-bundle-analysis
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/pipobscure
pipobscurehttps://github.com/pipobscure
Aug 5, 2026https://github.com/nodejs/node/pull/65016#issuecomment-5189454842
#65002https://github.com/nodejs/node/pull/65002
#65007https://github.com/nodejs/node/pull/65007
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
Aug 6, 2026https://github.com/nodejs/node/pull/65016#issuecomment-5202163732
https://ci.nodejs.org/job/node-test-pull-request/75555/https://ci.nodejs.org/job/node-test-pull-request/75555/
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/pipobscure
pipobscurehttps://github.com/pipobscure
Aug 6, 2026https://github.com/nodejs/node/pull/65016#issuecomment-5202185878
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/pipobscure
pipobscurehttps://github.com/pipobscure
Aug 8, 2026https://github.com/nodejs/node/pull/65016#issuecomment-5225154812
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/mcollina
mcollinahttps://github.com/mcollina
commit-queue https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acommit-queue
Aug 8, 2026https://github.com/nodejs/node/pull/65016#event-29155557330
https://github.com/mcollina
mcollinahttps://github.com/mcollina
Aug 8, 2026https://github.com/nodejs/node/pull/65016#issuecomment-5225526272
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
commit-queue https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acommit-queue
Aug 8, 2026https://github.com/nodejs/node/pull/65016#event-29158356773
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
Aug 8, 2026https://github.com/nodejs/node/pull/65016#issuecomment-5226125017
https://github.com/nodejs/node/actions/runs/31257528529https://github.com/nodejs/node/actions/runs/31257528529
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
commit-queue-failed https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acommit-queue-failed
Aug 8, 2026https://github.com/nodejs/node/pull/65016#event-29158357612
https://github.com/jasnell
jasnellhttps://github.com/jasnell
Aug 8, 2026 https://github.com/nodejs/node/pull/65016#pullrequestreview-4889102434
View reviewed changes https://github.com/nodejs/node/pull/65016/files
https://github.com/jasnell
jasnellhttps://github.com/jasnell
Aug 8, 2026https://github.com/nodejs/node/pull/65016#issuecomment-5226831690
@pipobscurehttps://github.com/pipobscure
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/pipobscure
pipobscurehttps://github.com/pipobscure
Aug 8, 2026https://github.com/nodejs/node/pull/65016#issuecomment-5227166773
Please reload this pagehttps://github.com/nodejs/node/pull/65016
pipobscurehttps://github.com/pipobscure
August 10, 2026 18:02https://github.com/nodejs/node/pull/65016#commits-pushed-19c48a5
https://github.com/pipobscure
test: cover ZIP header-confusion and DoS guardshttps://github.com/nodejs/node/pull/65016/commits/19c48a5b1fcdd5b867118b557bc2ed5582b7fa68
19c48a5https://github.com/nodejs/node/pull/65016/commits/19c48a5b1fcdd5b867118b557bc2ed5582b7fa68
https://github.com/pipobscure
zlib: reject local/central ZIP header mismatchhttps://github.com/nodejs/node/pull/65016/commits/adf232fae2a13d72742922d895b7e30c1d3bbf48
adf232fhttps://github.com/nodejs/node/pull/65016/commits/adf232fae2a13d72742922d895b7e30c1d3bbf48
https://github.com/pipobscure
zlib: do not hang archiving a FIFO or devicehttps://github.com/nodejs/node/pull/65016/commits/31ace3f3d6e82c4a4b8cd13fabd86759a54bd5ee
31ace3fhttps://github.com/nodejs/node/pull/65016/commits/31ace3f3d6e82c4a4b8cd13fabd86759a54bd5ee
https://github.com/pipobscure
test: cover ZIP fd lifecycle and add rollbackhttps://github.com/nodejs/node/pull/65016/commits/bee84c6bbed75400c35df441e3269c5e4e3ad307
bee84c6https://github.com/nodejs/node/pull/65016/commits/bee84c6bbed75400c35df441e3269c5e4e3ad307
https://github.com/pipobscure
zlib: let a ZipFile read finish before close()https://github.com/nodejs/node/pull/65016/commits/b41df040508c9b1281604f498c8fe4771f9e8fa1
b41df04https://github.com/nodejs/node/pull/65016/commits/b41df040508c9b1281604f498c8fe4771f9e8fa1
https://github.com/pipobscure
zlib: roll back a failed add() directory rewritehttps://github.com/nodejs/node/pull/65016/commits/0729e5c7f80edcc83659ab1747d917af694140e5
0729e5chttps://github.com/nodejs/node/pull/65016/commits/0729e5c7f80edcc83659ab1747d917af694140e5
https://github.com/pipobscure
pipobscurehttps://github.com/pipobscure
force-pushedhttps://github.com/nodejs/node/compare/719c83c8e3a75aef8ff1437dc71cff0099fcd2ba..0729e5c7f80edcc83659ab1747d917af694140e5
719c83chttps://github.com/nodejs/node/commit/719c83c8e3a75aef8ff1437dc71cff0099fcd2ba
0729e5chttps://github.com/nodejs/node/commit/0729e5c7f80edcc83659ab1747d917af694140e5
Compare https://github.com/nodejs/node/compare/719c83c8e3a75aef8ff1437dc71cff0099fcd2ba..0729e5c7f80edcc83659ab1747d917af694140e5
August 10, 2026 16:10https://github.com/nodejs/node/pull/65016#event-29233560637
https://github.com/pipobscure
pipobscurehttps://github.com/pipobscure
Aug 10, 2026https://github.com/nodejs/node/pull/65016#issuecomment-5242848017
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
Aug 10, 2026https://github.com/nodejs/node/pull/65016#issuecomment-5244633209
https://ci.nodejs.org/job/node-test-pull-request/75747/https://ci.nodejs.org/job/node-test-pull-request/75747/
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/pipobscure
pipobscurehttps://github.com/pipobscure
Aug 13, 2026https://github.com/nodejs/node/pull/65016#issuecomment-5285453482
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/trivikr
trivikrhttps://github.com/trivikr
Aug 14, 2026 https://github.com/nodejs/node/pull/65016#pullrequestreview-4933481733
View reviewed changes https://github.com/nodejs/node/pull/65016/files/0729e5c7f80edcc83659ab1747d917af694140e5
trivikrhttps://github.com/trivikr
https://github.com/nodejs/node/pull/65016#pullrequestreview-4933481733
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/trivikr
trivikrhttps://github.com/trivikr
commit-queue https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acommit-queue
zlib https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Azlib
commit-queue-failed https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acommit-queue-failed
Aug 14, 2026https://github.com/nodejs/node/pull/65016#event-29436520517
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
Aug 14, 2026https://github.com/nodejs/node/pull/65016#issuecomment-5289132478
54ac460...91a99c5https://github.com/nodejs/node/compare/54ac460a6bd7d901a11b61338c654f63a3433868...91a99c5e5c28871ccb143c24958d43c89c1b92c4
Please reload this pagehttps://github.com/nodejs/node/pull/65016
nodejs-github-bothttps://github.com/nodejs-github-bot
Aug 14, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-af5df60
https://github.com/pipobscure
https://github.com/nodejs-github-bot
test: cover ZIP header-confusion and DoS guardshttps://github.com/nodejs/node/commit/af5df60a420ebcf22a00264f6b39c8c72903585b
af5df60https://github.com/nodejs/node/commit/af5df60a420ebcf22a00264f6b39c8c72903585b
#65016https://github.com/nodejs/node/pull/65016
nodejs-github-bothttps://github.com/nodejs-github-bot
Aug 14, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-ad87559
https://github.com/pipobscure
https://github.com/nodejs-github-bot
zlib: reject local/central ZIP header mismatchhttps://github.com/nodejs/node/commit/ad87559e7e7dc56336261be3b7149685edaef178
ad87559https://github.com/nodejs/node/commit/ad87559e7e7dc56336261be3b7149685edaef178
#65016https://github.com/nodejs/node/pull/65016
nodejs-github-bothttps://github.com/nodejs-github-bot
Aug 14, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-13ea057
https://github.com/pipobscure
https://github.com/nodejs-github-bot
zlib: do not hang archiving a FIFO or devicehttps://github.com/nodejs/node/commit/13ea0579da96594bd90b775a72c95b3606b00b80
13ea057https://github.com/nodejs/node/commit/13ea0579da96594bd90b775a72c95b3606b00b80
#65016https://github.com/nodejs/node/pull/65016
nodejs-github-bothttps://github.com/nodejs-github-bot
Aug 14, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-e7834cd
https://github.com/pipobscure
https://github.com/nodejs-github-bot
test: cover ZIP fd lifecycle and add rollbackhttps://github.com/nodejs/node/commit/e7834cdbd08d513c2ccc7be31262305ebc64a3ea
e7834cdhttps://github.com/nodejs/node/commit/e7834cdbd08d513c2ccc7be31262305ebc64a3ea
#65016https://github.com/nodejs/node/pull/65016
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
Aug 14, 2026https://github.com/nodejs/node/pull/65016#event-29437228170
nodejs-github-bothttps://github.com/nodejs-github-bot
Aug 14, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-ad736a8
https://github.com/pipobscure
https://github.com/nodejs-github-bot
zlib: let a ZipFile read finish before close()https://github.com/nodejs/node/commit/ad736a851e1c91d129b7eba81fb3d6e6ddd9d00d
ad736a8https://github.com/nodejs/node/commit/ad736a851e1c91d129b7eba81fb3d6e6ddd9d00d
#65016https://github.com/nodejs/node/pull/65016
nodejs-github-bothttps://github.com/nodejs-github-bot
Aug 14, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-91a99c5
https://github.com/pipobscure
https://github.com/nodejs-github-bot
zlib: roll back a failed add() directory rewritehttps://github.com/nodejs/node/commit/91a99c5e5c28871ccb143c24958d43c89c1b92c4
91a99c5https://github.com/nodejs/node/commit/91a99c5e5c28871ccb143c24958d43c89c1b92c4
#65016https://github.com/nodejs/node/pull/65016
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
commit-queue https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acommit-queue
Aug 14, 2026https://github.com/nodejs/node/pull/65016#event-29437229330
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-0fc47fc
https://github.com/pipobscure
https://github.com/aduh95
test: cover ZIP header-confusion and DoS guardshttps://github.com/nodejs/node/commit/0fc47fc3ec2c33d6094bcc5ca84150b08ff9ac59
0fc47fchttps://github.com/nodejs/node/commit/0fc47fc3ec2c33d6094bcc5ca84150b08ff9ac59
#65016https://github.com/nodejs/node/pull/65016
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-2e959ce
https://github.com/pipobscure
https://github.com/aduh95
zlib: reject local/central ZIP header mismatchhttps://github.com/nodejs/node/commit/2e959cefc521cbc38a5132e4be9920e8a35ceb97
2e959cehttps://github.com/nodejs/node/commit/2e959cefc521cbc38a5132e4be9920e8a35ceb97
#65016https://github.com/nodejs/node/pull/65016
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-578f209
https://github.com/pipobscure
https://github.com/aduh95
zlib: do not hang archiving a FIFO or devicehttps://github.com/nodejs/node/commit/578f2094cd2d5375c49195def9e68b4d8910ab13
578f209https://github.com/nodejs/node/commit/578f2094cd2d5375c49195def9e68b4d8910ab13
#65016https://github.com/nodejs/node/pull/65016
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-ba5d86f
https://github.com/pipobscure
https://github.com/aduh95
test: cover ZIP fd lifecycle and add rollbackhttps://github.com/nodejs/node/commit/ba5d86f7081a446c8f2b5dbd4fa86ad63c5900b1
ba5d86fhttps://github.com/nodejs/node/commit/ba5d86f7081a446c8f2b5dbd4fa86ad63c5900b1
#65016https://github.com/nodejs/node/pull/65016
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-30077d1
https://github.com/pipobscure
https://github.com/aduh95
zlib: let a ZipFile read finish before close()https://github.com/nodejs/node/commit/30077d11bdf08a592f5b97da8a84dbb4fe146c4e
30077d1https://github.com/nodejs/node/commit/30077d11bdf08a592f5b97da8a84dbb4fe146c4e
#65016https://github.com/nodejs/node/pull/65016
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-8b096c0
https://github.com/pipobscure
https://github.com/aduh95
zlib: roll back a failed add() directory rewritehttps://github.com/nodejs/node/commit/8b096c057c43930d188d407444663b5bf923770e
8b096c0https://github.com/nodejs/node/commit/8b096c057c43930d188d407444663b5bf923770e
#65016https://github.com/nodejs/node/pull/65016
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-31742f2
https://github.com/pipobscure
https://github.com/aduh95
test: cover ZIP header-confusion and DoS guardshttps://github.com/nodejs/node/commit/31742f2f4265fb71fce6c7b95b107f5055d19266
31742f2https://github.com/nodejs/node/commit/31742f2f4265fb71fce6c7b95b107f5055d19266
#65016https://github.com/nodejs/node/pull/65016
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-55b0495
https://github.com/pipobscure
https://github.com/aduh95
zlib: reject local/central ZIP header mismatchhttps://github.com/nodejs/node/commit/55b04957c9e639688db55c1f733442a283af47b1
55b0495https://github.com/nodejs/node/commit/55b04957c9e639688db55c1f733442a283af47b1
#65016https://github.com/nodejs/node/pull/65016
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-2bda6db
https://github.com/pipobscure
https://github.com/aduh95
zlib: do not hang archiving a FIFO or devicehttps://github.com/nodejs/node/commit/2bda6db916aaf2598c62c969f92b9d9a1e2547d1
2bda6dbhttps://github.com/nodejs/node/commit/2bda6db916aaf2598c62c969f92b9d9a1e2547d1
#65016https://github.com/nodejs/node/pull/65016
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-00b687b
https://github.com/pipobscure
https://github.com/aduh95
test: cover ZIP fd lifecycle and add rollbackhttps://github.com/nodejs/node/commit/00b687bc4a83ebb497241637a752bead129853b6
00b687bhttps://github.com/nodejs/node/commit/00b687bc4a83ebb497241637a752bead129853b6
#65016https://github.com/nodejs/node/pull/65016
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-d29cc09
https://github.com/pipobscure
https://github.com/aduh95
zlib: let a ZipFile read finish before close()https://github.com/nodejs/node/commit/d29cc0926a1dac6f38cdb143ca99a7c4b0b0085d
d29cc09https://github.com/nodejs/node/commit/d29cc0926a1dac6f38cdb143ca99a7c4b0b0085d
#65016https://github.com/nodejs/node/pull/65016
aduh95https://github.com/aduh95
Aug 25, 2026 https://github.com/nodejs/node/pull/65016#ref-commit-1aafd19
https://github.com/pipobscure
https://github.com/aduh95
zlib: roll back a failed add() directory rewritehttps://github.com/nodejs/node/commit/1aafd198137f2d26d2f48e9cc0ea7a400015e6c3
1aafd19https://github.com/nodejs/node/commit/1aafd198137f2d26d2f48e9cc0ea7a400015e6c3
#65016https://github.com/nodejs/node/pull/65016
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
Aug 25, 2026 https://github.com/nodejs/node/pull/65016#ref-pullrequest-5251528519
2026-08-26, Version 26.8.0 (Current) #65551 https://github.com/nodejs/node/pull/65551
https://github.com/pipobscure
pipobscurehttps://github.com/pipobscure
September 19, 2026 10:47https://github.com/nodejs/node/pull/65016#event-31441691744
https://github.co/hiddenchars
https://github.com/nodejs/node/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F65016
https://github.com/mcollina
mcollina https://github.com/mcollina
https://github.com/nodejs/node/pull/65016/files/719c83c8e3a75aef8ff1437dc71cff0099fcd2ba
https://github.com/jasnell
jasnell https://github.com/jasnell
https://github.com/nodejs/node/pull/65016/files/719c83c8e3a75aef8ff1437dc71cff0099fcd2ba
https://github.com/trivikr
trivikr https://github.com/trivikr
https://github.com/nodejs/node/pull/65016/files/0729e5c7f80edcc83659ab1747d917af694140e5
Please reload this pagehttps://github.com/nodejs/node/pull/65016
commit-queue-rebase https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acommit-queue-rebase
needs-ci https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Aneeds-ci
zlib https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Azlib
Please reload this pagehttps://github.com/nodejs/node/pull/65016
https://github.com/pipobscure
https://github.com/nodejs-github-bot
https://github.com/mcollina
https://github.com/jasnell
https://github.com/trivikr
https://github.com/richardlau
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.