unzipDirectory of the file packages/api/src/shell/unzipDirectory.js of the component ZIP Handler. Executing a manipulation can lead to path traversal.This vulnerability is handled as CVE-2026-47669. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is recommended.
SOCIAL SHARE CARD GENERATOR