Skip to content

Fix: Percy CLI hangs on Node.js 26 during Chromium extraction — adm-zip variant (PER-10062) - #2344

Merged
prklm10 merged 6 commits into
masterfrom
fix/PER-10062-node26-admzip
Jul 20, 2026
Merged

Fix: Percy CLI hangs on Node.js 26 during Chromium extraction — adm-zip variant (PER-10062)#2344
prklm10 merged 6 commits into
masterfrom
fix/PER-10062-node26-admzip

Merge remote-tracking branch 'origin/master' into fix/PER-10062-node2…

31d304b
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / Semgrep OSS succeeded Jul 20, 2026 in 2s

2 new alerts

New alerts in code changed by this pull request

  • 2 warnings

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 38 in packages/core/src/unzip.js

See this annotation in the file changed.

Code scanning / Semgrep OSS

Semgrep Finding: javascript.lang.security.audit.path-traversal.path-join-resolve-traversal.path-join-resolve-traversal Warning

Detected possible user input going into a path.join or path.resolve function. This could possibly lead to a path traversal vulnerability, where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first.

Check warning on line 38 in packages/core/src/unzip.js

See this annotation in the file changed.

Code scanning / Semgrep OSS

Semgrep Finding: javascript.lang.security.audit.path-traversal.path-join-resolve-traversal.path-join-resolve-traversal Warning

Detected possible user input going into a path.join or path.resolve function. This could possibly lead to a path traversal vulnerability, where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first.