Issues

• [FR]: Ability to error on "zip-bomb" attacks

  101arrowz/fflate#308 · Filter by author sakshamgoyal-01 opened on Oct 21, 2026

• zip() and zipSync() silently drop entries whose name is __proto__

  101arrowz/fflate#307 · Filter by author q269384828 opened on Oct 21, 2026

• Private contact for a security report?

  101arrowz/fflate#304 · Filter by author Ikhideifidon opened on Oct 19, 2026

• Inflate loses output after more than 128 KiB of literals in one block (streaming, and inflateSync without out)

  101arrowz/fflate#302 · Filter by author bastianschilbe opened on Oct 8, 2026

• unzipSync treats ZIP64 size sentinels as actual sizes, causing a ~4 GiB allocation

  101arrowz/fflate#298 · Filter by author Tsuk1ko opened on Sep 24, 2026

• Empty distance tree in dynamic blocks breaks Windows' inflate

  101arrowz/fflate#296 · Filter by author neilrackett opened on Sep 20, 2026

• zipSync throws Permission denied to access property "constructor" in Firefox WebExtensions (Xray wrapper context)

  101arrowz/fflate#294 · Filter by author ITSC-GmbH opened on Aug 19, 2026
  1

• tsconfig related build errors when using typescript 5.8.3, node 24.19.0

  101arrowz/fflate#293 · Filter by author apteryks opened on Aug 19, 2026
  1

• Consider migrating to ESM-only

  101arrowz/fflate#291 · Filter by author 43081j opened on Aug 9, 2026

• FlateError is exported as an interface rather than a class

  101arrowz/fflate#290 · Filter by author catamphetamine opened on Jul 27, 2026

• Async APIs (unzip/inflate/gunzip) crash with TypeError: k is not a function in minified production builds

  101arrowz/fflate#288 · Filter by author web-dev-sam opened on Jun 29, 2026

• zlib deflate example

  101arrowz/fflate#284 · Filter by author catamphetamine opened on Jun 20, 2026

• Streaming Zip/ZipDeflate produces corrupt deflate output for specific small binary files (regression in 0.8.x)

  101arrowz/fflate#282 · Filter by author venkat-kaluva opened on Jun 8, 2026
  1

• [Node.js] Passing strToU8() result to ZipDeflate or AsyncZipDeflate results in files content being converted to comma-separated numbers

  101arrowz/fflate#279 · Filter by author catamphetamine opened on Jun 7, 2026
  2

• DataCloneError when pushing a Uint8Array into AsyncZipDeflate

  101arrowz/fflate#278 · Filter by author catamphetamine opened on Jun 7, 2026

• AsyncZipInflate?

  101arrowz/fflate#277 · Filter by author catamphetamine opened on Jun 7, 2026
  1

• [zipSync] To migrate from JSZip to fflate, there are incompatibilities found.

  101arrowz/fflate#272 · Filter by author cyfung1031 opened on May 30, 2026

• Adding comment field to the whole zip rather than per-file

  101arrowz/fflate#269 · Filter by author cyfung1031 opened on May 30, 2026

• Expose entry mtime in unzip API

  101arrowz/fflate#268 · Filter by author tophf opened on May 27, 2026

• .flush(true) produces corrupted data

  101arrowz/fflate#267 · Filter by author BenoitZugmeyer opened on May 26, 2026

• Async classes crash in Deno with misleading RangeError: Maximum call stack size exceeded

  101arrowz/fflate#266 · Filter by author theaddonn opened on May 25, 2026

• Gunzip streaming callback fires multiple times in 0.8.3 (including empty chunks), where 0.8.2 fired once

  101arrowz/fflate#265 · Filter by author ljharb opened on May 22, 2026
  2

• Streaming Deflate emits invalid back-references on some inputs (cross-validated against native zlib; deflateSync correct on same input)

  101arrowz/fflate#260 · Filter by author PeterCoherent opened on May 18, 2026
  3

• Unable to import module in Angular+Vitest

  101arrowz/fflate#259 · Filter by author HarelM opened on May 17, 2026

• Bun cannot zip data larger than 160,000 bytes

  101arrowz/fflate#253 · Filter by author nakasyou opened on Feb 13, 2026
  4