Every CVE Search/ Get API key

CVE-2023-45853

pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

9.8 CriticalFix available

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

3.45%Up 3.4 points since Oct 14, 2023
90%50%10%1%

What each source reports

NVD Score used 9.8

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
CVE-2023-45853
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
CVE List 8.8

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
CVE-2023-45853
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
EUVDEUVD-2023-2778 8.8

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
EUVD-2023-2778
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-mq29-j5xf-cjwr 9.8

pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product.

pyminizip uses version 1.2.11 of zlib's code.

Record
GHSA-mq29-j5xf-cjwr
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
OSVALPINE-CVE-2023-45853 9.8

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
ALPINE-CVE-2023-45853
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-31294 9.8

CVE-2023-45853 affecting package boost for versions less than 1.76.0-4

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-31294
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 47 moreShow less
OSVAZL-31298 9.8

CVE-2023-45853 affecting package cloud-hypervisor for versions less than 32.0-2

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-31298
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-31496 9.8

CVE-2023-45853 affecting package rust for versions less than 1.72.0-5

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-31496
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-31497 9.8

CVE-2023-45853 affecting package tcl for versions less than 8.6.13-3

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-31497
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-31500 9.8

CVE-2023-45853 affecting package zlib for versions less than 1.2.13-2

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-31500
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-33350 9.8

CVE-2023-45853 affecting package rubygem-mini_portile2 for versions less than 2.8.0-1

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-33350
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-34597 9.8

CVE-2023-45853 affecting package cloud-hypervisor for versions less than 32.0-2

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-34597
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-35229 9.8

CVE-2023-45853 affecting package rubygem-mini_portile2 for versions less than 2.8.0-1

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-35229
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVAZL-35242 9.8

CVE-2023-45853 affecting package rust for versions less than 1.75.0-1

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-35242
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVAZL-35295 9.8

CVE-2023-45853 affecting package tcl for versions less than 8.6.13-3

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-35295
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVAZL-35400 9.8

CVE-2023-45853 affecting package zlib for versions less than 1.3.1-1

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-35400
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-38040 9.8

CVE-2023-45853 affecting package keras for versions less than 3.1.1-1

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-38040
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-42720 9.8

CVE-2023-45853 affecting package cloud-hypervisor-cvm for versions less than 38.0.72.2-1

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-42720
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-42741 9.8

CVE-2023-45853 affecting package cloud-hypervisor-cvm for versions less than 38.0.72.2-1

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-42741
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-43435 9.8

CVE-2023-45853 affecting package libkml 1.3.0-41

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-43435
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-43522 9.8

CVE-2023-45853 affecting package deltarpm 3.6.2-7

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-43522
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-43525 9.8

CVE-2023-45853 affecting package gpsbabel 1.8.0-4

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-43525
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-43609 9.8

CVE-2023-45853 affecting package blosc 1.21.4-2

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-43609
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-44043 9.8

CVE-2023-45853 affecting package deltarpm 3.6.5-2

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-44043
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVAZL-44127 9.8

CVE-2023-45853 affecting package blosc for versions less than 1.21.6-1

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-44127
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-44436 9.8

CVE-2023-45853 affecting package gpsbabel 1.8.0-4

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-44436
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVAZL-44985 9.8

CVE-2023-45853 affecting package libkml 1.3.0-41

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-44985
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVAZL-61279 9.8

CVE-2023-45853 affecting package rust for versions less than 1.85.0-1

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-61279
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVAZL-61795 9.8

CVE-2023-45853 affecting package optipng 0.7.8-5

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
AZL-61795
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSV 8.8

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
CVE-2023-45853
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-45853 9.8

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
DEBIAN-CVE-2023-45853
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVGHSA-mq29-j5xf-cjwr 9.8

pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product.

pyminizip uses version 1.2.11 of zlib's code.

Record
GHSA-mq29-j5xf-cjwr
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
OSVJLSEC-2026-479 9.8

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
JLSEC-2026-479
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1751 9.8

zlib security update

Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.

Security Fix(es):

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product.(CVE-2023-45853)

Record
OESA-2023-1751
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVPYSEC-2026-501 9.8

pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product.

pyminizip uses version 1.2.11 of zlib's code.

Record
PYSEC-2026-501
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2023-45853 9.8

CVE-2023-45853 in zlib - Patched by Root

Root has patched CVE-2023-45853 in the zlib package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2023-45853
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2023-45853 9.8

CVE-2023-45853 in zlib - Patched by Root

Root has patched CVE-2023-45853 in the zlib package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2023-45853
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-45853 9.8

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.

Record
UBUNTU-CVE-2023-45853
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2023-1698179235 No score

Fix CVE(s): CVE-2023-45853

  • SECURITY UPDATE: Reject overflows of zip header fields in minizip
    • debian/patches/CVE-2023-45853.patch: Check length of comment, filename and extra field in zipOpenNewFileInZip4_64
    • CVE-2023-45853
Record
CLSA-2023-1698179235
Updated
2026-11-02
OSVCLSA-2023-1698179598 No score

Fix CVE(s): CVE-2023-45853

  • SECURITY UPDATE: Reject overflows of zip header fields in minizip
    • debian/patches/CVE-2023-45853.patch: Check length of comment, filename and extra field in zipOpenNewFileInZip4_64
    • CVE-2023-45853
Record
CLSA-2023-1698179598
Updated
2026-11-02
OSVCLSA-2023-1698179730 No score

zlib: Fix of CVE-2023-45853

  • CVE-2023-45853: Reject overflows of zip header fields in minizip
Record
CLSA-2023-1698179730
Updated
2026-11-02
OSVCLSA-2023-1698179874 No score

zlib: Fix of CVE-2023-45853

  • CVE-2023-45853: Reject overflows of zip header fields in minizip
Record
CLSA-2023-1698179874
Updated
2026-11-02
OSVCLSA-2023-1698180079 No score

zlib: Fix of CVE-2023-45853

  • CVE-2023-45853: Reject overflows of zip header fields in minizip
Record
CLSA-2023-1698180079
Updated
2026-11-02
OSVCLSA-2023-1698180296 No score

zlib: Fix of CVE-2023-45853

  • CVE-2023-45853: Reject overflows of zip header fields in minizip
Record
CLSA-2023-1698180296
Updated
2026-11-02
OSVCLSA-2023-1698180806 No score

zlib: Fix of CVE-2023-45853

  • CVE-2023-45853: Reject overflows of zip header fields in minizip
Record
CLSA-2023-1698180806
Updated
2026-11-02
OSVMGASA-2023-0312 No score

Updated zlib packages fix a security vulnerability

The updated packages fix a security vulnerability:

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. (CVE-2023-45853)

Record
MGASA-2023-0312
Updated
2026-11-02
OSVopenSUSE-SU-2024:13363-1 No score

libminizip1-1.3-1.1 on GA media

These are all security issues fixed in the libminizip1-1.3-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13363-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13462-1 No score

libQt5Pdf5-5.15.16-1.1 on GA media

These are all security issues fixed in the libQt5Pdf5-5.15.16-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13462-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14857-1 No score

grype-0.88.0-1.1 on GA media

These are all security issues fixed in the grype-0.88.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14857-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20487-1 No score

Security update for zlib

This update for zlib fixes the following issues:

  • CVE-2026-27171: Fixed an infinite loop via the crc32_combine64 and crc32_combine_gen64 functions due to missing checks for negative lengths. (bsc#1258392)
  • CVE-2023-45853: Fixed an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6. (bsc#1216378)
Record
openSUSE-SU-2026:20487-1
Updated
2026-11-02
OSVSUSE-SU-2023:4215-1 No score

Security update for zlib

This update for zlib fixes the following issues:

  • CVE-2023-45853: Fixed an integer overflow that would lead to a buffer overflow in the minizip subcomponent (bsc#1216378).
Record
SUSE-SU-2023:4215-1
Updated
2026-11-02
OSVSUSE-SU-2023:4216-1 No score

Security update for zlib

This update for zlib fixes the following issues:

  • CVE-2023-45853: Fixed an integer overflow that would lead to a buffer overflow in the minizip subcomponent (bsc#1216378).
Record
SUSE-SU-2023:4216-1
Updated
2026-11-02
OSVSUSE-SU-2023:4217-1 No score

Security update for zlib

This update for zlib fixes the following issues:

  • CVE-2023-45853: Fixed an integer overflow that would lead to a buffer overflow in the minizip subcomponent (bsc#1216378).
Record
SUSE-SU-2023:4217-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pyminizip
PyPI
 through 0.2.6 None known
minizip
Alpine:v3.18
 before 1.2.13-r1
1.2.13-r1
minizip
Alpine:v3.19
 before 1.3-r1
1.3-r1
minizip
Alpine:v3.20
 before 1.3-r1
1.3-r1
minizip
Alpine:v3.21
 before 1.3-r1
1.3-r1
minizip
Alpine:v3.22
 before 1.3-r1
1.3-r1
minizip
Alpine:v3.23
 before 1.3-r1
1.3-r1
minizip
Alpine:v3.24
 before 1.3-r1
1.3-r1
qt5-qtwebengine
Alpine:v3.18
 before 5.15.13-r9
5.15.13-r9
qt5-qtwebengine
Alpine:v3.19
 before 5.15.15-r4
5.15.15-r4
Show 113 moreShow less
Affected packages
PackageAffectedFixed
qt5-qtwebengine
Alpine:v3.20
 before 5.15.15-r4
5.15.15-r4
qt5-qtwebengine
Alpine:v3.21
 before 5.15.15-r4
5.15.15-r4
qt5-qtwebengine
Alpine:v3.22
 before 5.15.15-r4
5.15.15-r4
qt5-qtwebengine
Alpine:v3.23
 before 5.15.15-r4
5.15.15-r4
qt6-qtwebengine
Alpine:v3.19
 before 6.6.0-r1
6.6.0-r1
qt6-qtwebengine
Alpine:v3.20
 before 6.6.0-r1
6.6.0-r1
qt6-qtwebengine
Alpine:v3.21
 before 6.6.0-r1
6.6.0-r1
qt6-qtwebengine
Alpine:v3.22
 before 6.6.0-r1
6.6.0-r1
qt6-qtwebengine
Alpine:v3.23
 before 6.6.0-r1
6.6.0-r1
qt6-qtwebengine
Alpine:v3.24
 before 6.6.0-r1
6.6.0-r1
boost
Azure Linux:2
 before 1.76.0-4
1.76.0-4
cloud-hypervisor
Azure Linux:2
 before 32.0-2
32.0-2
rust
Azure Linux:2
 before 1.72.0-5
1.72.0-5
tcl
Azure Linux:2
 before 8.6.13-3
8.6.13-3
zlib
Azure Linux:2
 before 1.2.13-2
1.2.13-2
rubygem-mini_portile2
Azure Linux:2
 before 2.8.0-1
2.8.0-1
cloud-hypervisor
Azure Linux:3
 before 32.0-2
32.0-2
rubygem-mini_portile2
Azure Linux:3
 before 2.8.0-1
2.8.0-1
rust
Azure Linux:3
 before 1.75.0-1
1.75.0-1
tcl
Azure Linux:3
 before 8.6.13-3
8.6.13-3
zlib
Azure Linux:3
 before 1.3.1-1
1.3.1-1
keras
Azure Linux:3
 before 3.1.1-1
3.1.1-1
cloud-hypervisor-cvm
Azure Linux:2
 before 38.0.72.2-1
38.0.72.2-1
cloud-hypervisor-cvm
Azure Linux:3
 before 38.0.72.2-1
38.0.72.2-1
libkml
Azure Linux:2
 through 1.3.0-41 None known
deltarpm
Azure Linux:2
 through 3.6.2-7 None known
gpsbabel
Azure Linux:2
 through 1.8.0-4 None known
blosc
Azure Linux:2
 through 1.21.4-2 None known
deltarpm
Azure Linux:3
 through 3.6.5-2 None known
blosc
Azure Linux:3
 before 1.21.6-1
1.21.6-1
gpsbabel
Azure Linux:3
 through 1.8.0-4 None known
libkml
Azure Linux:3
 through 1.3.0-41 None known
rust
Azure Linux:3
 1.85.0 up to 1.85.0-1
1.85.0-1
optipng
Azure Linux:3
 through 0.7.8-5 None known
lib32z1
TuxCare:Ubuntu:18.04
 before 1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1
1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1
lib32z1-dev
TuxCare:Ubuntu:18.04
 before 1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1
1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1
libx32z1
TuxCare:Ubuntu:18.04
 before 1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1
1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1
libx32z1-dev
TuxCare:Ubuntu:18.04
 before 1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1
1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1
zlib1g
TuxCare:Ubuntu:18.04
 before 1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1
1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1
zlib1g-dev
TuxCare:Ubuntu:18.04
 before 1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1
1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1
lib32z1
TuxCare:Ubuntu:16.04
 before 1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3
1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3
lib32z1-dev
TuxCare:Ubuntu:16.04
 before 1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3
1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3
libx32z1
TuxCare:Ubuntu:16.04
 before 1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3
1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3
libx32z1-dev
TuxCare:Ubuntu:16.04
 before 1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3
1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3
zlib1g
TuxCare:Ubuntu:16.04
 before 1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3
1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3
zlib1g-dev
TuxCare:Ubuntu:16.04
 before 1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3
1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3
minizip
TuxCare:OracleLinux:6
 before 1.2.3-29.el6.tuxcare.els3
1.2.3-29.el6.tuxcare.els3
minizip-devel
TuxCare:OracleLinux:6
 before 1.2.3-29.el6.tuxcare.els3
1.2.3-29.el6.tuxcare.els3
zlib
TuxCare:OracleLinux:6
 before 1.2.3-29.el6.tuxcare.els3
1.2.3-29.el6.tuxcare.els3
zlib-devel
TuxCare:OracleLinux:6
 before 1.2.3-29.el6.tuxcare.els3
1.2.3-29.el6.tuxcare.els3
zlib-static
TuxCare:OracleLinux:6
 before 1.2.3-29.el6.tuxcare.els3
1.2.3-29.el6.tuxcare.els3
zlib
TuxCare:CentOS:8.5
 before 1.2.11-17.el8.tuxcare.els3
1.2.11-17.el8.tuxcare.els3
zlib-devel
TuxCare:CentOS:8.5
 before 1.2.11-17.el8.tuxcare.els3
1.2.11-17.el8.tuxcare.els3
zlib-static
TuxCare:CentOS:8.5
 before 1.2.11-17.el8.tuxcare.els3
1.2.11-17.el8.tuxcare.els3
zlib
TuxCare:CentOS:8.4
 before 1.2.11-17.el8.tuxcare.els3
1.2.11-17.el8.tuxcare.els3
zlib-devel
TuxCare:CentOS:8.4
 before 1.2.11-17.el8.tuxcare.els3
1.2.11-17.el8.tuxcare.els3
zlib-static
TuxCare:CentOS:8.4
 before 1.2.11-17.el8.tuxcare.els3
1.2.11-17.el8.tuxcare.els3
minizip
TuxCare:CentOS:7
 before 1.2.7-21.el7.tuxcare.els1
1.2.7-21.el7.tuxcare.els1
minizip-devel
TuxCare:CentOS:7
 before 1.2.7-21.el7.tuxcare.els1
1.2.7-21.el7.tuxcare.els1
zlib
TuxCare:CentOS:7
 before 1.2.7-21.el7.tuxcare.els1
1.2.7-21.el7.tuxcare.els1
zlib-devel
TuxCare:CentOS:7
 before 1.2.7-21.el7.tuxcare.els1
1.2.7-21.el7.tuxcare.els1
zlib-static
TuxCare:CentOS:7
 before 1.2.7-21.el7.tuxcare.els1
1.2.7-21.el7.tuxcare.els1
minizip
TuxCare:CentOS:6
 before 1.2.3-29.el6.tuxcare.els3
1.2.3-29.el6.tuxcare.els3
minizip-devel
TuxCare:CentOS:6
 before 1.2.3-29.el6.tuxcare.els3
1.2.3-29.el6.tuxcare.els3
zlib
TuxCare:CentOS:6
 before 1.2.3-29.el6.tuxcare.els3
1.2.3-29.el6.tuxcare.els3
zlib-devel
TuxCare:CentOS:6
 before 1.2.3-29.el6.tuxcare.els3
1.2.3-29.el6.tuxcare.els3
zlib-static
TuxCare:CentOS:6
 before 1.2.3-29.el6.tuxcare.els3
1.2.3-29.el6.tuxcare.els3
minizip
Debian:12
 before 1.1-8+deb12u1, plus listed versions
1.1-8
1.1-8+deb12u1
zlib
Debian:12
 All versions, plus listed versions
1:1.2.13.dfsg-11:1.2.13.dfsg-21:1.2.13.dfsg-31:1.3.dfsg+really1.3.1-11:1.3.dfsg+really1.3.1-2
Show 10 moreShow less
1:1.3.dfsg+really1.3.1-31:1.3.dfsg+really1.3.2-11:1.3.dfsg+really1.3.2-21:1.3.dfsg+really1.3.2-31:1.3.dfsg+really1.3.2-41:1.3.dfsg-11:1.3.dfsg-21:1.3.dfsg-31:1.3.dfsg-3.11:1.3.dfsg-3.1~exp1
 None known
zlib
Debian:13
 before 1:1.3.dfsg-2
1:1.3.dfsg-2
zlib
Debian:14
 before 1:1.3.dfsg-2
1:1.3.dfsg-2
minizip
Debian:10
 before 1.1-8+deb10u1, plus listed versions
1.1-8
1.1-8+deb10u1
pyminizip
PyPI
 through 0.2.6, plus listed versions
0.0.10.0.20.1.00.1.10.2.0
Show 5 moreShow less
0.2.10.2.20.2.30.2.40.2.5
 None known
GCCBootstrap_jll
Julia
 All versions None known
Openresty_jll
Julia
 before 1.27.1+0
1.27.1+0
Zlib_jll
Julia
 before 1.3.1+0
1.3.1+0
zlib
Mageia:8
 before 1.2.12-1.4.mga8
1.2.12-1.4.mga8
zlib
Mageia:9
 before 1.2.13-1.1.mga9
1.2.13-1.1.mga9
zlib
openEuler:20.03-LTS-SP1
 before 1.2.11-22.oe1
1.2.11-22.oe1
zlib
openEuler:20.03-LTS-SP3
 before 1.2.11-23.oe1
1.2.11-23.oe1
zlib
openEuler:22.03-LTS
 before 1.2.11-24.oe2203sp2
1.2.11-24.oe2203sp2
zlib
openEuler:22.03-LTS-SP1
 before 1.2.11-24.oe2203sp1
1.2.11-24.oe2203sp1
zlib
openEuler:22.03-LTS-SP2
 before 1.2.11-24.oe2203sp2
1.2.11-24.oe2203sp2
zlib
Root:Debian:11
 before 1:1.2.11.dfsg-2+deb11u2.root.io.8
1:1.2.11.dfsg-2+deb11u2.root.io.81:1.2.11.dfsg-2+deb11u2.root.io.71:1.2.11.dfsg-2+deb11u2.root.io.21:1.2.11.dfsg-2+deb11u2.root.io.31:1.2.11.dfsg-2+deb11u2.root.io.11:1.2.11.dfsg-2+deb11u2.root.io.41:1.2.11.dfsg-2+deb11u2.root.io.51:1.2.11.dfsg-2+deb11u2.root.io.61:1.2.11.dfsg-2+deb11u2.aikido.101:1.2.11.dfsg-2+deb11u2.root.io.91:1.2.11.dfsg-2+deb11u2.aikido.11
rootio-zlib
Root:Debian:11
 before 1:1.2.11.dfsg-2+deb11u2.root.io.8
1:1.2.11.dfsg-2+deb11u2.root.io.81:1.2.11.dfsg-2+deb11u2.root.io.71:1.2.11.dfsg-2+deb11u2.root.io.21:1.2.11.dfsg-2+deb11u2.root.io.31:1.2.11.dfsg-2+deb11u2.root.io.11:1.2.11.dfsg-2+deb11u2.root.io.41:1.2.11.dfsg-2+deb11u2.root.io.51:1.2.11.dfsg-2+deb11u2.root.io.61:1.2.11.dfsg-2+deb11u2.aikido.101:1.2.11.dfsg-2+deb11u2.root.io.91:1.2.11.dfsg-2+deb11u2.aikido.11
zlib
Root:Debian:12
 before 1:1.2.13.dfsg-1.root.io.4
1:1.2.13.dfsg-1.root.io.41:1.2.13.dfsg-1.root.io.11:1.2.13.dfsg-1.root.io.21:1.2.13.dfsg-1.root.io.31:1.2.13.dfsg-1.aikido.51:1.2.13.dfsg-1.aikido.6
rootio-zlib
Root:Debian:12
 before 1:1.2.13.dfsg-1.root.io.4
1:1.2.13.dfsg-1.root.io.41:1.2.13.dfsg-1.root.io.11:1.2.13.dfsg-1.root.io.21:1.2.13.dfsg-1.root.io.31:1.2.13.dfsg-1.aikido.51:1.2.13.dfsg-1.aikido.6
zlib
SUSE:Linux Enterprise Micro 5.5
 before 1.2.13-150500.4.3.1
1.2.13-150500.4.3.1
zlib
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 1.2.13-150500.4.3.1
1.2.13-150500.4.3.1
zlib
SUSE:Linux Enterprise Module for Development Tools 15 SP5
 before 1.2.13-150500.4.3.1
1.2.13-150500.4.3.1
zlib
openSUSE:Leap 15.5
 before 1.2.13-150500.4.3.1
1.2.13-150500.4.3.1
zlib
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.2.11-11.37.1
1.2.11-11.37.1
zlib
SUSE:Linux Enterprise Server 12 SP5
 before 1.2.11-11.37.1
1.2.11-11.37.1
zlib
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.2.11-11.37.1
1.2.11-11.37.1
zlib
SUSE:Linux Enterprise Micro 5.3
 before 1.2.11-150000.3.48.1
1.2.11-150000.3.48.1
zlib
SUSE:Linux Enterprise Micro 5.4
 before 1.2.11-150000.3.48.1
1.2.11-150000.3.48.1
zlib
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 1.2.11-150000.3.48.1
1.2.11-150000.3.48.1
zlib
SUSE:Linux Enterprise Module for Development Tools 15 SP4
 before 1.2.11-150000.3.48.1
1.2.11-150000.3.48.1
zlib
SUSE:Manager Proxy 4.2
 before 1.2.11-150000.3.48.1
1.2.11-150000.3.48.1
zlib
SUSE:Manager Server 4.2
 before 1.2.11-150000.3.48.1
1.2.11-150000.3.48.1
zlib
SUSE:Linux Enterprise Micro 5.1
 before 1.2.11-150000.3.48.1
1.2.11-150000.3.48.1
zlib
SUSE:Linux Enterprise Micro 5.2
 before 1.2.11-150000.3.48.1
1.2.11-150000.3.48.1
zlib
openSUSE:Leap Micro 5.3
 before 1.2.11-150000.3.48.1
1.2.11-150000.3.48.1
zlib
openSUSE:Leap Micro 5.4
 before 1.2.11-150000.3.48.1
1.2.11-150000.3.48.1
zlib
openSUSE:Leap 15.4
 before 1.2.11-150000.3.48.1
1.2.11-150000.3.48.1
zlib
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 1.2.13-slfo.1.1_2.1
1.2.13-slfo.1.1_2.1
zlib
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 1.2.13-7.1
1.2.13-7.1
zlib
SUSE:Linux Micro 6.2
From an advisory covering 2 CVEs
 before 1.2.13-160000.3.1
1.2.13-160000.3.1
zlib
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 1.2.13-160000.3.1
1.2.13-160000.3.1
zlib
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 1.2.13-160000.3.1
1.2.13-160000.3.1
zlib
Ubuntu:Pro:14.04:LTS
 before 1:1.2.8.dfsg-1ubuntu1.1+esm3, plus listed versions
1:1.2.8.dfsg-1ubuntu11:1.2.8.dfsg-1ubuntu1.11:1.2.8.dfsg-1ubuntu1.1+esm11:1.2.8.dfsg-1ubuntu1.1+esm2
1:1.2.8.dfsg-1ubuntu1.1+esm3
grype
openSUSE:Tumbleweed
 before 0.88.0-1.1
0.88.0-1.1
zlib
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 1.2.13-160000.3.1
1.2.13-160000.3.1

History

History
RecordedChangedSources
affected
factsOSV
affectedOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-45853 is a critical vulnerability (CVSS 9.8) in Smihica Pyminizip, published October 14, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.45%, the 89th percentile. Fixed in minizip 1.2.13-r1.

References

Show 54 moreShow less
This page doesn't list everything

Left out on purpose, here and in the API, to keep responses small: 6 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open