---
title: "yauzl security advisories"
description: "1 known security advisory for yauzl, with the versions they affect and the version that fixes each."
url: https://inlinr.com/packages/yauzl/security
lang: en
---

[Packages](https://inlinr.com/packages)

# yauzl

3.4.0 · 7 Jun 2026 MIT 71.3M / week [Repository](https://github.com/thejoshwolfe/yauzl) [npm](https://www.npmjs.com/package/yauzl) [Atom feed](https://inlinr.com/packages/feed/yauzl)

Your version 

## Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

| Line | Newest | Where it stands |
| ---- | ------ | --------------- |
|      | 3.4.0  | Safe from 3.2.1 |

- Moderate  
[yauzl contains an off-by-one error](https://inlinr.com/advisories/GHSA-gmq8-994r-jv83)GHSA-gmq8-994r-jv83 · 12 Mar 2026  
fixed in 3.2.1

### Quality and security signals

What [npm](https://www.npmjs.com/package/yauzl) and [deps.dev](https://deps.dev/npm/yauzl) say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 4 Nov 2026\. Releases and advisories last read 4 Nov 2026.