Search for packages
Package details: pkg:conan/zlib@1.2.13
purl pkg:conan/zlib@1.2.13
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-6ar6-xb8y-aaap zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference). CVE-2022-37434

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T16:01:17.500646+00:00 GitLab Importer Fixing VCID-6ar6-xb8y-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/zlib/CVE-2022-37434.yml 36.1.3
2025-06-03T22:41:41.239180+00:00 GitLab Importer Fixing VCID-6ar6-xb8y-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/zlib/CVE-2022-37434.yml 36.1.0
2025-06-02T22:30:30.806501+00:00 GitLab Importer Fixing VCID-6ar6-xb8y-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/zlib/CVE-2022-37434.yml 36.1.2
2025-04-17T17:15:19.114176+00:00 GitLab Importer Fixing VCID-6ar6-xb8y-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/zlib/CVE-2022-37434.yml 36.0.0