Search for packages
Package details: pkg:nuget/epsitec-zlib@1.3.0
purl pkg:nuget/epsitec-zlib@1.3.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-t9z5-qvz6-aaam
Aliases:
CVE-2023-45853
GHSA-mq29-j5xf-cjwr
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2024-09-17T22:45:36.489905+00:00 GitLab Importer Affected by VCID-t9z5-qvz6-aaam https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/epsitec-zlib/CVE-2023-45853.yml 34.0.1
2024-01-03T18:07:02.378092+00:00 GitLab Importer Affected by VCID-t9z5-qvz6-aaam https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/epsitec-zlib/CVE-2023-45853.yml 34.0.0rc1