Every CVE Search/ Get API key

CVE-2026-3381

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

9.8 CriticalFix available

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.62%Up 0.6 points since Mar 5, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.8

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
CVE-2026-3381
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-1395
Updated
2026-11-02
EUVDEUVD-2026-9520 9.8

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
EUVD-2026-9520
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-jvq4-fjjq-g6w7 9.8

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. ...

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
GHSA-jvq4-fjjq-g6w7
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-1284
Updated
2026-11-02
NVD 9.8

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
CVE-2026-3381
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-1284
Updated
2026-11-02
OSVALPINE-CVE-2026-3381 9.8

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
ALPINE-CVE-2026-3381
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2026-3381 9.8

CVE-2026-3381 does not affect BellSoft software

Record
BELL-CVE-2026-3381
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSV 9.8

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
CVE-2026-3381
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-1395
Updated
2026-11-02
OSVDEBIAN-CVE-2026-3381 9.8

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
DEBIAN-CVE-2026-3381
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-3381 9.8

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
UBUNTU-CVE-2026-3381
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-79239 No score

CVE-2026-3381 affecting package blosc 1.21.4-2

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79239
Updated
2026-11-02
OSVAZL-79242 No score

CVE-2026-3381 affecting package clucene 2.3.3.4-38

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79242
Updated
2026-11-02
OSVAZL-79245 No score

CVE-2026-3381 affecting package deltarpm 3.6.2-7

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79245
Updated
2026-11-02
OSVAZL-79248 No score

CVE-2026-3381 affecting package fltk 1.3.5-4

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79248
Updated
2026-11-02
OSVAZL-79251 No score

CVE-2026-3381 affecting package gpsbabel 1.8.0-4

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79251
Updated
2026-11-02
OSVAZL-79254 No score

CVE-2026-3381 affecting package ogdi 4.1.0-9

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79254
Updated
2026-11-02
OSVAZL-79257 No score

CVE-2026-3381 affecting package openjpeg2 2.3.1-12

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79257
Updated
2026-11-02
OSVAZL-79260 No score

CVE-2026-3381 affecting package teckit 2.5.9-4

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79260
Updated
2026-11-02
OSVAZL-79262 No score

CVE-2026-3381 affecting package blosc 1.21.6-1

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79262
Updated
2026-11-05
OSVAZL-79265 No score

CVE-2026-3381 affecting package clucene 2.3.3.4-40

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79265
Updated
2026-11-05
OSVAZL-79268 No score

CVE-2026-3381 affecting package deltarpm 3.6.5-2

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79268
Updated
2026-11-05
OSVAZL-79271 No score

CVE-2026-3381 affecting package fltk 1.3.8-1

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79271
Updated
2026-11-05
OSVAZL-79274 No score

CVE-2026-3381 affecting package gpsbabel 1.8.0-4

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79274
Updated
2026-11-05
OSVAZL-79277 No score

CVE-2026-3381 affecting package ogdi 4.1.1-3

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79277
Updated
2026-11-05
OSVAZL-79280 No score

CVE-2026-3381 affecting package openjpeg2 2.3.1-12

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79280
Updated
2026-11-05
OSVAZL-79283 No score

CVE-2026-3381 affecting package optipng 0.7.8-5

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79283
Updated
2026-11-05
OSVAZL-79286 No score

CVE-2026-3381 affecting package teckit 2.5.12-4

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79286
Updated
2026-11-05
OSVAZL-79290 No score

CVE-2026-3381 affecting package boost 1.76.0-4

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79290
Updated
2026-11-02
OSVAZL-79293 No score

CVE-2026-3381 affecting package ceph 16.2.10-11

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79293
Updated
2026-11-02
OSVAZL-79296 No score

CVE-2026-3381 affecting package cloud-hypervisor 32.0-7

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79296
Updated
2026-11-02
OSVAZL-79299 No score

CVE-2026-3381 affecting package cloud-hypervisor-cvm 38.0.72.2-5

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79299
Updated
2026-11-02
OSVAZL-79302 No score

CVE-2026-3381 affecting package cmake 3.21.4-21

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79302
Updated
2026-11-02
OSVAZL-79304 No score

CVE-2026-3381 affecting package binutils 2.41-10

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79304
Updated
2026-11-02
OSVAZL-79308 No score

CVE-2026-3381 affecting package conda 4.11.0-1

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79308
Updated
2026-11-02
OSVAZL-79310 No score

CVE-2026-3381 affecting package boost 1.83.0-2

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79310
Updated
2026-11-02
OSVAZL-79316 No score

CVE-2026-3381 affecting package ceph 18.2.2-12

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79316
Updated
2026-11-02
OSVAZL-79326 No score

CVE-2026-3381 affecting package erlang 25.3.2.21-4

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79326
Updated
2026-11-02
OSVAZL-79328 No score

CVE-2026-3381 affecting package cloud-hypervisor 48.0.246-3

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79328
Updated
2026-11-02
OSVAZL-79331 No score

CVE-2026-3381 affecting package cmake 3.30.3-12

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79331
Updated
2026-11-02
OSVAZL-79334 No score

CVE-2026-3381 affecting package conda 24.3.0-4

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79334
Updated
2026-11-02
OSVAZL-79337 No score

CVE-2026-3381 affecting package crash 9.0.0-1

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79337
Updated
2026-11-02
OSVAZL-79346 No score

CVE-2026-3381 affecting package erlang 26.2.5.17-1

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79346
Updated
2026-11-02
OSVAZL-79350 No score

CVE-2026-3381 affecting package grpc 1.42.0-11

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79350
Updated
2026-11-02
OSVAZL-79358 No score

CVE-2026-3381 affecting package gdb 13.2-6

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79358
Updated
2026-11-02
OSVAZL-79362 No score

CVE-2026-3381 affecting package keras 2.11.0-3

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79362
Updated
2026-11-02
OSVAZL-79368 No score

CVE-2026-3381 affecting package mariadb 10.6.24-1

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79368
Updated
2026-11-02
OSVAZL-79371 No score

CVE-2026-3381 affecting package mariadb-connector-c 3.1.10-6

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79371
Updated
2026-11-02
OSVAZL-79373 No score

CVE-2026-3381 affecting package grpc 1.62.3-1

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79373
Updated
2026-11-02
OSVAZL-79377 No score

CVE-2026-3381 affecting package mysql 8.0.45-2

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79377
Updated
2026-11-02
OSVAZL-79380 No score

CVE-2026-3381 affecting package nmap 7.93-4

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79380
Updated
2026-11-02
OSVAZL-79389 No score

CVE-2026-3381 affecting package nss 3.75-2

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79389
Updated
2026-11-02
OSVAZL-79391 No score

CVE-2026-3381 affecting package kata-containers 3.19.1.kata2-6

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79391
Updated
2026-11-02
OSVAZL-79395 No score

CVE-2026-3381 affecting package perl 5.34.1-491

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79395
Updated
2026-11-02
OSVAZL-79407 No score

CVE-2026-3381 affecting package python-tensorboard 2.11.0-3

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79407
Updated
2026-11-02
OSVAZL-79410 No score

CVE-2026-3381 affecting package python-tensorflow-estimator 2.11.0-2

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

Record
AZL-79410
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
perl-compress-raw-zlib
Alpine:v3.20
 before 2.222-r0
2.222-r0
perl-compress-raw-zlib
Alpine:v3.21
 before 2.222-r0
2.222-r0
perl-compress-raw-zlib
Alpine:v3.22
 before 2.222-r0
2.222-r0
perl-compress-raw-zlib
Alpine:v3.23
 before 2.222-r0
2.222-r0
perl-compress-raw-zlib
Alpine:v3.24
 before 2.222-r0
2.222-r0
blosc
Azure Linux:2
 through 1.21.4-2 None known
clucene
Azure Linux:2
 through 2.3.3.4-38 None known
deltarpm
Azure Linux:2
 through 3.6.2-7 None known
fltk
Azure Linux:2
 through 1.3.5-4 None known
gpsbabel
Azure Linux:2
 through 1.8.0-4 None known
Show 69 moreShow less
Affected packages
PackageAffectedFixed
ogdi
Azure Linux:2
 through 4.1.0-9 None known
openjpeg2
Azure Linux:2
 through 2.3.1-12 None known
teckit
Azure Linux:2
 through 2.5.9-4 None known
blosc
Azure Linux:3
 through 1.21.6-1 None known
clucene
Azure Linux:3
 through 2.3.3.4-40 None known
deltarpm
Azure Linux:3
 through 3.6.5-2 None known
fltk
Azure Linux:3
 through 1.3.8-1 None known
gpsbabel
Azure Linux:3
 through 1.8.0-4 None known
ogdi
Azure Linux:3
 through 4.1.1-3 None known
openjpeg2
Azure Linux:3
 through 2.3.1-12 None known
optipng
Azure Linux:3
 through 0.7.8-5 None known
teckit
Azure Linux:3
 through 2.5.12-4 None known
boost
Azure Linux:2
 through 1.76.0-4 None known
ceph
Azure Linux:2
 through 16.2.10-11 None known
cloud-hypervisor
Azure Linux:2
 through 32.0-7 None known
cloud-hypervisor-cvm
Azure Linux:2
 through 38.0.72.2-5 None known
cmake
Azure Linux:2
 through 3.21.4-21 None known
binutils
Azure Linux:3
 through 2.41-10 None known
conda
Azure Linux:2
 through 4.11.0-1 None known
boost
Azure Linux:3
 through 1.83.0-2 None known
ceph
Azure Linux:3
 through 18.2.2-12 None known
erlang
Azure Linux:2
 through 25.3.2.21-4 None known
cloud-hypervisor
Azure Linux:3
 through 48.0.246-3 None known
cmake
Azure Linux:3
 through 3.30.3-12 None known
conda
Azure Linux:3
 through 24.3.0-4 None known
crash
Azure Linux:3
 through 9.0.0-1 None known
erlang
Azure Linux:3
 through 26.2.5.17-1 None known
grpc
Azure Linux:2
 through 1.42.0-11 None known
gdb
Azure Linux:3
 through 13.2-6 None known
keras
Azure Linux:2
 through 2.11.0-3 None known
mariadb
Azure Linux:2
 through 10.6.24-1 None known
mariadb-connector-c
Azure Linux:2
 through 3.1.10-6 None known
grpc
Azure Linux:3
 through 1.62.3-1 None known
mysql
Azure Linux:2
 through 8.0.45-2 None known
nmap
Azure Linux:2
 through 7.93-4 None known
nss
Azure Linux:2
 through 3.75-2 None known
kata-containers
Azure Linux:3
 through 3.19.1.kata2-6 None known
perl
Azure Linux:2
 through 5.34.1-491 None known
python-tensorboard
Azure Linux:2
 through 2.11.0-3 None known
python-tensorflow-estimator
Azure Linux:2
 through 2.11.0-2 None known
mariadb-connector-c
Azure Linux:3
 through 3.3.8-3 None known
mysql
Azure Linux:3
 through 8.0.45-1 None known
nmap
Azure Linux:3
 through 7.95-3 None known
nss
Azure Linux:3
 through 3.96.1-3 None known
qt5-qtbase
Azure Linux:2
 through 5.12.11-19 None known
rubygem-mini_portile2
Azure Linux:2
 through 2.8.0-1 None known
rust
Azure Linux:2
 through 1.72.0-14 None known
python-tensorboard
Azure Linux:3
 through 2.16.2-6 None known
sudo
Azure Linux:2
 through 1.9.17-1 None known
syslinux
Azure Linux:2
 through 6.04-10 None known
tcl
Azure Linux:2
 through 8.6.13-3 None known
tensorflow
Azure Linux:2
 through 2.11.1-2 None known
qtbase
Azure Linux:3
 through 6.6.3-4 None known
zlib
Azure Linux:2
 through 1.2.13-2 None known
rubygem-mini_portile2
Azure Linux:3
 through 2.8.4-1 None known
rust
Azure Linux:3
 through 1.75.0-25 None known
rust
Azure Linux:3
 1.85.0 to 1.90.0-4 None known
sudo
Azure Linux:3
 through 1.9.17-1 None known
syslinux
Azure Linux:3
 through 6.04-11 None known
tcl
Azure Linux:3
 through 8.6.13-3 None known
tensorflow
Azure Linux:3
 through 2.16.1-11 None known
libcompress-raw-zlib-perl
Debian:12
 before 2.011-2
2.011-2
libcompress-raw-zlib-perl
Debian:13
 before 2.011-2
2.011-2
libcompress-raw-zlib-perl
Debian:14
 before 2.011-2
2.011-2
libcompress-raw-zlib-perl
Ubuntu:16.04:LTS
 All versions, plus listed versions
2.068-12.069-12.069-1build1
 None known
libcompress-raw-zlib-perl
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.074-1build12.074-1build22.075-12.076-1
 None known
libcompress-raw-zlib-perl
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.087-12.087-1build12.089-12.090-12.092-12.093-1
 None known
perl-Compress-Raw-Zlib
openSUSE:Tumbleweed
 before 2.222-1.1
2.222-1.1
perl-Compress-Raw-Zlib
openSUSE:Leap 16.0
 before 2.222-bp160.1.1
2.222-bp160.1.1

History

History
RecordedChangedSources
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-3381 is a critical vulnerability (CVSS 9.8) in Pmqs Compress::raw::zlib, published March 5, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.62%, the 50th percentile. Fixed in perl-compress-raw-zlib 2.222-r0.

References

Show 13 moreShow less
This page doesn't list everything

Left out on purpose, here and in the API, to keep responses small: 23 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open