{"id":"CVE-2023-45853","aliases":["ALPINE-CVE-2023-45853","AZL-31294","AZL-31298","AZL-31496","AZL-31497","AZL-31500","AZL-33350","AZL-34597","AZL-35229","AZL-35242","AZL-35295","AZL-35400","AZL-38040","AZL-42720","AZL-42741","AZL-43435","AZL-43522","AZL-43525","AZL-43609","AZL-44043","AZL-44127","AZL-44436","AZL-44985","AZL-61279","AZL-61795","CLSA-2023-1698179235","CLSA-2023-1698179598","CLSA-2023-1698179730","CLSA-2023-1698179874","CLSA-2023-1698180079","CLSA-2023-1698180296","CLSA-2023-1698180806","DEBIAN-CVE-2023-45853","DLA-3670-1","EUVD-2023-2778","GHSA-mq29-j5xf-cjwr","JLSEC-2026-479","MGASA-2023-0312","OESA-2023-1751","PYSEC-2026-501","ROOT-OS-DEBIAN-11-CVE-2023-45853","ROOT-OS-DEBIAN-12-CVE-2023-45853","SUSE-SU-2023:4215-1","SUSE-SU-2023:4216-1","SUSE-SU-2023:4217-1","SUSE-SU-2024:2431-1","SUSE-SU-2026:20659-1","SUSE-SU-2026:20709-1","SUSE-SU-2026:21013-1","SUSE-SU-2026:21151-1","UBUNTU-CVE-2023-45853","USN-7107-1","openSUSE-SU-2024:13363-1","openSUSE-SU-2024:13462-1","openSUSE-SU-2025:14857-1","openSUSE-SU-2026:20487-1"],"status":"published","title":"pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03448,"percentile":0.89095,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2023-10-14T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"minizip","fixed_in":["1.2.13-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"minizip","fixed_in":["1.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"minizip","fixed_in":["1.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"minizip","fixed_in":["1.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"minizip","fixed_in":["1.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"minizip","fixed_in":["1.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"minizip","fixed_in":["1.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"qt5-qtwebengine","fixed_in":["5.15.13-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"qt5-qtwebengine","fixed_in":["5.15.15-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"qt5-qtwebengine","fixed_in":["5.15.15-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"qt5-qtwebengine","fixed_in":["5.15.15-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qt5-qtwebengine","fixed_in":["5.15.15-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt5-qtwebengine","fixed_in":["5.15.15-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"qt6-qtwebengine","fixed_in":["6.6.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"qt6-qtwebengine","fixed_in":["6.6.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"qt6-qtwebengine","fixed_in":["6.6.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","fixed_in":["6.6.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","fixed_in":["6.6.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","fixed_in":["6.6.0-r1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"boost","fixed_in":["1.76.0-4"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"cloud-hypervisor","fixed_in":["32.0-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"rust","fixed_in":["1.72.0-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"tcl","fixed_in":["8.6.13-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"zlib","fixed_in":["1.2.13-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"rubygem-mini_portile2","fixed_in":["2.8.0-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"cloud-hypervisor","fixed_in":["32.0-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"rubygem-mini_portile2","fixed_in":["2.8.0-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"rust","fixed_in":["1.75.0-1","1.85.0-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"tcl","fixed_in":["8.6.13-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"zlib","fixed_in":["1.3.1-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"keras","fixed_in":["3.1.1-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"cloud-hypervisor-cvm","fixed_in":["38.0.72.2-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"cloud-hypervisor-cvm","fixed_in":["38.0.72.2-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"blosc","fixed_in":["1.21.6-1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32z1","fixed_in":["1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32z1-dev","fixed_in":["1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32z1","fixed_in":["1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32z1-dev","fixed_in":["1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"zlib1g","fixed_in":["1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"zlib1g-dev","fixed_in":["1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"lib32z1","fixed_in":["1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"lib32z1-dev","fixed_in":["1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libx32z1","fixed_in":["1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libx32z1-dev","fixed_in":["1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"zlib1g","fixed_in":["1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"zlib1g-dev","fixed_in":["1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"minizip","fixed_in":["1.2.3-29.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"minizip-devel","fixed_in":["1.2.3-29.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"zlib","fixed_in":["1.2.3-29.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"zlib-devel","fixed_in":["1.2.3-29.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"zlib-static","fixed_in":["1.2.3-29.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"zlib","fixed_in":["1.2.11-17.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"zlib-devel","fixed_in":["1.2.11-17.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"zlib-static","fixed_in":["1.2.11-17.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"zlib","fixed_in":["1.2.11-17.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"zlib-devel","fixed_in":["1.2.11-17.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"zlib-static","fixed_in":["1.2.11-17.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"minizip","fixed_in":["1.2.7-21.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"minizip-devel","fixed_in":["1.2.7-21.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"zlib","fixed_in":["1.2.7-21.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"zlib-devel","fixed_in":["1.2.7-21.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"zlib-static","fixed_in":["1.2.7-21.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"minizip","fixed_in":["1.2.3-29.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"minizip-devel","fixed_in":["1.2.3-29.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"zlib","fixed_in":["1.2.3-29.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"zlib-devel","fixed_in":["1.2.3-29.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"zlib-static","fixed_in":["1.2.3-29.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"minizip","fixed_in":["1.1-8+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"zlib","fixed_in":["1:1.3.dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"zlib","fixed_in":["1:1.3.dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"minizip","fixed_in":["1.1-8+deb10u1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Openresty_jll","fixed_in":["1.27.1+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"Zlib_jll","fixed_in":["1.3.1+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"zlib","fixed_in":["1.2.12-1.4.mga8"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"zlib","fixed_in":["1.2.13-1.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"zlib","fixed_in":["1.2.11-22.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"zlib","fixed_in":["1.2.11-23.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"zlib","fixed_in":["1.2.11-24.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"zlib","fixed_in":["1.2.11-24.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"zlib","fixed_in":["1.2.11-24.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"zlib","fixed_in":["1:1.2.11.dfsg-2+deb11u2.root.io.8","1:1.2.11.dfsg-2+deb11u2.root.io.7","1:1.2.11.dfsg-2+deb11u2.root.io.2","1:1.2.11.dfsg-2+deb11u2.root.io.3","1:1.2.11.dfsg-2+deb11u2.root.io.1","1:1.2.11.dfsg-2+deb11u2.root.io.4","1:1.2.11.dfsg-2+deb11u2.root.io.5","1:1.2.11.dfsg-2+deb11u2.root.io.6","1:1.2.11.dfsg-2+deb11u2.aikido.10","1:1.2.11.dfsg-2+deb11u2.root.io.9","1:1.2.11.dfsg-2+deb11u2.aikido.11"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-zlib","fixed_in":["1:1.2.11.dfsg-2+deb11u2.root.io.8","1:1.2.11.dfsg-2+deb11u2.root.io.7","1:1.2.11.dfsg-2+deb11u2.root.io.2","1:1.2.11.dfsg-2+deb11u2.root.io.3","1:1.2.11.dfsg-2+deb11u2.root.io.1","1:1.2.11.dfsg-2+deb11u2.root.io.4","1:1.2.11.dfsg-2+deb11u2.root.io.5","1:1.2.11.dfsg-2+deb11u2.root.io.6","1:1.2.11.dfsg-2+deb11u2.aikido.10","1:1.2.11.dfsg-2+deb11u2.root.io.9","1:1.2.11.dfsg-2+deb11u2.aikido.11"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"zlib","fixed_in":["1:1.2.13.dfsg-1.root.io.4","1:1.2.13.dfsg-1.root.io.1","1:1.2.13.dfsg-1.root.io.2","1:1.2.13.dfsg-1.root.io.3","1:1.2.13.dfsg-1.aikido.5","1:1.2.13.dfsg-1.aikido.6"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-zlib","fixed_in":["1:1.2.13.dfsg-1.root.io.4","1:1.2.13.dfsg-1.root.io.1","1:1.2.13.dfsg-1.root.io.2","1:1.2.13.dfsg-1.root.io.3","1:1.2.13.dfsg-1.aikido.5","1:1.2.13.dfsg-1.aikido.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"zlib","fixed_in":["1.2.13-150500.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"zlib","fixed_in":["1.2.13-150500.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"zlib","fixed_in":["1.2.13-150500.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"zlib","fixed_in":["1.2.13-150500.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"zlib","fixed_in":["1.2.11-11.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"zlib","fixed_in":["1.2.11-11.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"zlib","fixed_in":["1.2.11-11.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"zlib","fixed_in":["1.2.11-150000.3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"zlib","fixed_in":["1.2.11-150000.3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"zlib","fixed_in":["1.2.11-150000.3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"zlib","fixed_in":["1.2.11-150000.3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"zlib","fixed_in":["1.2.11-150000.3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"zlib","fixed_in":["1.2.11-150000.3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"zlib","fixed_in":["1.2.11-150000.3.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"zlib","fixed_in":["1.2.11-150000.3.48.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"zlib","fixed_in":["1.2.11-150000.3.48.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"zlib","fixed_in":["1.2.11-150000.3.48.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"zlib","fixed_in":["1.2.11-150000.3.48.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"zlib","fixed_in":["1:1.2.8.dfsg-1ubuntu1.1+esm3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"grype","fixed_in":["0.88.0-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"pyminizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.2.6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.13-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.15-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.15-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.15-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.15-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.15-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-r1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"boost","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.76.0-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"cloud-hypervisor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.72.0-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"tcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.6.13-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"rubygem-mini_portile2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"cloud-hypervisor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"rubygem-mini_portile2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.75.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"tcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.6.13-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"keras","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"cloud-hypervisor-cvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.0.72.2-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"cloud-hypervisor-cvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.0.72.2-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libkml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.3.0-41"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"deltarpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.6.2-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"gpsbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.8.0-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"blosc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.21.4-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"deltarpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.6.5-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"blosc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.6-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"gpsbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.8.0-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libkml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.3.0-41"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.85.0"},{"fixed":"1.85.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.7.8-5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32z1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32z1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32z1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32z1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"zlib1g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"zlib1g-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-0ubuntu2.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"lib32z1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"lib32z1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libx32z1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libx32z1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"zlib1g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"zlib1g-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"minizip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-17.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-17.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-17.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-17.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-17.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-17.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.7-21.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"minizip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.7-21.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.7-21.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.7-21.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.7-21.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"minizip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-8+deb12u1"}]}],"versions":["1.1-8"]},{"source":"osv","ecosystem":"Debian:12","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.2.13.dfsg-1","1:1.2.13.dfsg-2","1:1.2.13.dfsg-3","1:1.3.dfsg+really1.3.1-1","1:1.3.dfsg+really1.3.1-2","1:1.3.dfsg+really1.3.1-3","1:1.3.dfsg+really1.3.2-1","1:1.3.dfsg+really1.3.2-2","1:1.3.dfsg+really1.3.2-3","1:1.3.dfsg+really1.3.2-4","1:1.3.dfsg-1","1:1.3.dfsg-2","1:1.3.dfsg-3","1:1.3.dfsg-3.1","1:1.3.dfsg-3.1~exp1"]},{"source":"osv","ecosystem":"Debian:13","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-8+deb10u1"}]}],"versions":["1.1-8"]},{"source":"osv","ecosystem":"PyPI","package":"pyminizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.2.6"}]}],"versions":["0.0.1","0.0.2","0.1.0","0.1.1","0.2.0","0.2.1","0.2.2","0.2.3","0.2.4","0.2.5","0.2.6"]},{"source":"osv","ecosystem":"Julia","package":"GCCBootstrap_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Julia","package":"Openresty_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.27.1+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"Zlib_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.3.1+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-1.4.mga8"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-1.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-22.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-23.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-24.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-24.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-24.oe2203sp2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"pyminizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.2.6"}]}],"versions":["0.0.1","0.0.2","0.1.0","0.1.1","0.2.0","0.2.1","0.2.2","0.2.3","0.2.4","0.2.5","0.2.6"]},{"source":"osv","ecosystem":"Root:Debian:11","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.8"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.7"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.2"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.3"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.1"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.4"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.5"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.6"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.aikido.10"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.9"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.aikido.11"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.8"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.7"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.2"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.3"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.1"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.4"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.5"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.6"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.aikido.10"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.root.io.9"},{"fixed":"1:1.2.11.dfsg-2+deb11u2.aikido.11"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.13.dfsg-1.root.io.4"},{"fixed":"1:1.2.13.dfsg-1.root.io.1"},{"fixed":"1:1.2.13.dfsg-1.root.io.2"},{"fixed":"1:1.2.13.dfsg-1.root.io.3"},{"fixed":"1:1.2.13.dfsg-1.aikido.5"},{"fixed":"1:1.2.13.dfsg-1.aikido.6"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.13.dfsg-1.root.io.4"},{"fixed":"1:1.2.13.dfsg-1.root.io.1"},{"fixed":"1:1.2.13.dfsg-1.root.io.2"},{"fixed":"1:1.2.13.dfsg-1.root.io.3"},{"fixed":"1:1.2.13.dfsg-1.aikido.5"},{"fixed":"1:1.2.13.dfsg-1.aikido.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-150500.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-150500.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-150500.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-150500.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-11.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-11.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-11.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.48.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.48.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.48.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-150500.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-slfo.1.1_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-1ubuntu1.1+esm3"}]}],"versions":["1:1.2.8.dfsg-1ubuntu1","1:1.2.8.dfsg-1ubuntu1.1","1:1.2.8.dfsg-1ubuntu1.1+esm1","1:1.2.8.dfsg-1ubuntu1.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-1ubuntu1.1+esm3"}]}],"versions":["1:1.2.8.dfsg-1ubuntu1","1:1.2.8.dfsg-1ubuntu1.1","1:1.2.8.dfsg-1ubuntu1.1+esm1","1:1.2.8.dfsg-1ubuntu1.1+esm2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"grype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.88.0-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-160000.3.1"}]}],"bundled":2}],"products":[{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"smihica","product":"pyminizip"},{"vendor":"zlib","product":"zlib"}],"references":[{"url":"https://github.com/madler/zlib/pull/843","tags":["x_transferred","Issue Tracking","Patch","fix","web","report"]},{"url":"https://www.winimage.com/zLibDll/minizip.html","tags":["x_transferred","Product","web","report"]},{"url":"https://github.com/madler/zlib/blob/ac8f12c97d1afd9bafa9c710f827d40a407d3266/contrib/README.contrib#L1-L4","tags":["x_transferred","Product","web"]},{"url":"https://chromium.googlesource.com/chromium/src/+/de29dd6c7151d3cd37cb4cf0036800ddfb1d8b61","tags":["x_transferred","Mailing List","Patch","web","report"]},{"url":"https://chromium.googlesource.com/chromium/src/+/d709fb23806858847131027da95ef4c548813356","tags":["x_transferred","Mailing List","Patch","web","report"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/20/9","tags":["mailing-list","x_transferred","Mailing List","article","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/11/msg00026.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://security.netapp.com/advisory/ntap-20231130-0009/","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://pypi.org/project/pyminizip/#history","tags":["x_transferred","Release Notes","package","web"]},{"url":"https://security.gentoo.org/glsa/202401-18","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/24/10","tags":["mailing-list","x_transferred","Mailing List","article","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-470355.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45853","tags":["web","advisory"]},{"url":"https://github.com/madler/zlib/commit/73331a6a0481067628f065ffe87bb1d8f787d10c","tags":["web"]},{"url":"https://github.com/smihica/pyminizip/blob/master/zlib-1.2.11/contrib/minizip/zip.c","tags":["web"]},{"url":"https://github.com/advisories/GHSA-mq29-j5xf-cjwr","tags":["advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-45853","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1698179235","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1698179598","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2023-1698179730.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2023-1698179874.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1698180079.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos7-els/CLSA-2023-1698180296.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2023-1698180806.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45853.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-45853","tags":["advisory"]},{"url":"https://github.com/smihica/pyminizip","tags":["package"]},{"url":"https://security.netapp.com/advisory/ntap-20231130-0009","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2023-0312.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32426","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/10/20/9","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1751","tags":["advisory"]},{"url":"https://pypi.org/project/pyminizip","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234215-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216378","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45853","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234216-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234217-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242431-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620659-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1258392","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27171","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620709-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621013-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621151-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-45853","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45853","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7107-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5996","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7ABXZCXAJPKFIKTZDV7F2NZKSAF3WVEW/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-45853","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T00:00:00Z","modified":"2026-10-14T23:55:52.951Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:35:22.640346Z"}],"euvd":[{"id":"EUVD-2023-2778","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T00:00:00Z","modified":"2026-10-14T23:55:52Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:11.209168Z"}],"ghsa":[{"id":"GHSA-mq29-j5xf-cjwr","title":"pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product.\n\npyminizip uses version 1.2.11 of zlib's code.","status":"published","published":"2023-10-14T03:31:16Z","modified":"2024-01-24T21:38:15Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:37:32.302254Z"}],"nvd":[{"id":"CVE-2023-45853","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09.323Z","modified":"2026-10-15T00:16:39.75Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:08:37.83429Z"}],"osv":[{"id":"ALPINE-CVE-2023-45853","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09.323Z","modified":"2026-11-03T06:32:59.532929217Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"AZL-31294","title":"CVE-2023-45853 affecting package boost for versions less than 1.76.0-4","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:26:13.213601Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-31298","title":"CVE-2023-45853 affecting package cloud-hypervisor for versions less than 32.0-2","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:26:13.069148Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-31496","title":"CVE-2023-45853 affecting package rust for versions less than 1.72.0-5","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:26:20.376181Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-31497","title":"CVE-2023-45853 affecting package tcl for versions less than 8.6.13-3","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:26:19.994689Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-31500","title":"CVE-2023-45853 affecting package zlib for versions less than 1.2.13-2","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:26:21.140137Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-33350","title":"CVE-2023-45853 affecting package rubygem-mini_portile2 for versions less than 2.8.0-1","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:26:48.79326Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-34597","title":"CVE-2023-45853 affecting package cloud-hypervisor for versions less than 32.0-2","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:33:33.60502Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"AZL-35229","title":"CVE-2023-45853 affecting package rubygem-mini_portile2 for versions less than 2.8.0-1","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:19.554273Z"},{"id":"AZL-35242","title":"CVE-2023-45853 affecting package rust for versions less than 1.75.0-1","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:19.554273Z"},{"id":"AZL-35295","title":"CVE-2023-45853 affecting package tcl for versions less than 8.6.13-3","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:19.554273Z"},{"id":"AZL-35400","title":"CVE-2023-45853 affecting package zlib for versions less than 1.3.1-1","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:55:29.571109Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"AZL-38040","title":"CVE-2023-45853 affecting package keras for versions less than 3.1.1-1","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:50:55.610379Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-42720","title":"CVE-2023-45853 affecting package cloud-hypervisor-cvm for versions less than 38.0.72.2-1","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:30:43.305363Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"AZL-42741","title":"CVE-2023-45853 affecting package cloud-hypervisor-cvm for versions less than 38.0.72.2-1","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:47:42.602594Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"AZL-43435","title":"CVE-2023-45853 affecting package libkml 1.3.0-41","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:31:00.037105Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-43522","title":"CVE-2023-45853 affecting package deltarpm 3.6.2-7","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:31:02.70059Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-43525","title":"CVE-2023-45853 affecting package gpsbabel 1.8.0-4","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:31:03.439361Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-43609","title":"CVE-2023-45853 affecting package blosc 1.21.4-2","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:31:04.451182Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44043","title":"CVE-2023-45853 affecting package deltarpm 3.6.5-2","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"AZL-44127","title":"CVE-2023-45853 affecting package blosc for versions less than 1.21.6-1","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-04-21T04:54:47.629766Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44436","title":"CVE-2023-45853 affecting package gpsbabel 1.8.0-4","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"AZL-44985","title":"CVE-2023-45853 affecting package libkml 1.3.0-41","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:20.321068Z"},{"id":"AZL-61279","title":"CVE-2023-45853 affecting package rust for versions less than 1.85.0-1","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"AZL-61795","title":"CVE-2023-45853 affecting package optipng 0.7.8-5","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"CVE-2023-45853","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T00:00:00Z","modified":"2026-10-28T10:35:14.283472736Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:34.287121Z"},{"id":"DEBIAN-CVE-2023-45853","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:09.323Z","modified":"2026-10-26T18:02:35.534653702Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"GHSA-mq29-j5xf-cjwr","title":"pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product.\n\npyminizip uses version 1.2.11 of zlib's code.","status":"published","published":"2023-10-14T03:31:16Z","modified":"2026-09-10T03:50:03.95853721Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:46:52.170928Z"},{"id":"JLSEC-2026-479","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in `zipOpenNewFileInZip4_64` via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2026-05-07T17:36:47.122Z","modified":"2026-07-25T18:24:30.623417946Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2023-1751","title":"zlib security update","description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.\r\n\r\nSecurity Fix(es):\r\n\r\nMiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product.(CVE-2023-45853)","status":"published","published":"2023-10-20T11:06:12Z","modified":"2026-08-18T01:17:55.811234114Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"PYSEC-2026-501","title":"pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product.\n\npyminizip uses version 1.2.11 of zlib's code.","status":"published","published":"2026-06-29T11:50:43.774027Z","modified":"2026-07-01T20:23:02.988949Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:57.671918Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2023-45853","title":"CVE-2023-45853 in zlib - Patched by Root","description":"Root has patched CVE-2023-45853 in the zlib package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-10-06T06:11:16Z","modified":"2026-10-06T07:15:04.020122627Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:28.80888Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2023-45853","title":"CVE-2023-45853 in zlib - Patched by Root","description":"Root has patched CVE-2023-45853 in the zlib package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-09-09T14:28:45Z","modified":"2026-09-09T15:15:02.877231736Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"UBUNTU-CVE-2023-45853","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.","status":"published","published":"2023-10-14T02:15:00Z","modified":"2026-04-22T14:12:32.156084Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"CLSA-2023-1698179235","title":"Fix CVE(s): CVE-2023-45853","description":"\n   * SECURITY UPDATE: Reject overflows of zip header fields in minizip\n     - debian/patches/CVE-2023-45853.patch: Check length of comment,\n       filename and extra field in zipOpenNewFileInZip4_64\n     - CVE-2023-45853","status":"published","published":"2023-10-24T20:27:20Z","modified":"2026-06-04T10:04:27.876603Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1698179598","title":"Fix CVE(s): CVE-2023-45853","description":"\n   * SECURITY UPDATE: Reject overflows of zip header fields in minizip\n     - debian/patches/CVE-2023-45853.patch: Check length of comment,\n       filename and extra field in zipOpenNewFileInZip4_64\n     - CVE-2023-45853","status":"published","published":"2023-10-24T20:33:23Z","modified":"2026-06-04T10:03:19.552688Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1698179730","title":"zlib: Fix of CVE-2023-45853","description":"- CVE-2023-45853: Reject overflows of zip header fields in minizip","status":"published","published":"2023-10-24T20:35:34Z","modified":"2026-06-01T00:33:24.863137409Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1698179874","title":"zlib: Fix of CVE-2023-45853","description":"- CVE-2023-45853: Reject overflows of zip header fields in minizip","status":"published","published":"2023-10-24T20:37:58Z","modified":"2026-06-01T00:33:21.935496574Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1698180079","title":"zlib: Fix of CVE-2023-45853","description":"- CVE-2023-45853: Reject overflows of zip header fields in minizip","status":"published","published":"2023-10-24T20:41:23Z","modified":"2026-06-01T00:33:11.498547464Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1698180296","title":"zlib: Fix of CVE-2023-45853","description":"- CVE-2023-45853: Reject overflows of zip header fields in minizip","status":"published","published":"2023-10-24T20:45:01Z","modified":"2026-06-01T00:33:17.277296309Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1698180806","title":"zlib: Fix of CVE-2023-45853","description":"- CVE-2023-45853: Reject overflows of zip header fields in minizip","status":"published","published":"2023-10-24T20:53:31Z","modified":"2026-06-01T00:33:02.809354141Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"DLA-3670-1","title":"minizip - security update","status":"published","published":"2023-11-28T00:00:00Z","modified":"2026-03-09T02:08:37.91244Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2023-0312","title":"Updated zlib packages fix a security vulnerability","description":"The updated packages fix a security vulnerability:\n\nMiniZip in zlib through 1.3 has an integer overflow and resultant\nheap-based buffer overflow in zipOpenNewFileInZip4_64 via a long\nfilename, comment, or extra field. (CVE-2023-45853)\n","status":"published","published":"2023-11-09T12:55:51Z","modified":"2026-04-16T04:41:54.016490603Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13363-1","title":"libminizip1-1.3-1.1 on GA media","description":"These are all security issues fixed in the libminizip1-1.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:17:53.513257Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2024:13462-1","title":"libQt5Pdf5-5.15.16-1.1 on GA media","description":"These are all security issues fixed in the libQt5Pdf5-5.15.16-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:36:39.715212Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2025:14857-1","title":"grype-0.88.0-1.1 on GA media","description":"These are all security issues fixed in the grype-0.88.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-06T00:00:00Z","modified":"2026-02-04T04:02:44.462317Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2026:20487-1","title":"Security update for zlib","description":"This update for zlib fixes the following issues:\n\n\n- CVE-2026-27171: Fixed an infinite loop via the crc32_combine64 and crc32_combine_gen64 functions due to missing checks for negative lengths. (bsc#1258392)\n- CVE-2023-45853: Fixed an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6. (bsc#1216378)\n","status":"published","published":"2026-04-09T11:18:30Z","modified":"2026-04-22T18:26:38.435174Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2023:4215-1","title":"Security update for zlib","description":"This update for zlib fixes the following issues:\n\n- CVE-2023-45853: Fixed an integer overflow that would lead to a\n  buffer overflow in the minizip subcomponent (bsc#1216378).\n","status":"published","published":"2023-10-26T10:19:27Z","modified":"2026-02-04T02:54:47.126215Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4216-1","title":"Security update for zlib","description":"This update for zlib fixes the following issues:\n\n- CVE-2023-45853: Fixed an integer overflow that would lead to a\n  buffer overflow in the minizip subcomponent (bsc#1216378).\n","status":"published","published":"2023-10-26T10:19:53Z","modified":"2026-02-04T03:43:33.215963Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4217-1","title":"Security update for zlib","description":"This update for zlib fixes the following issues:\n\n- CVE-2023-45853: Fixed an integer overflow that would lead to a\n  buffer overflow in the minizip subcomponent (bsc#1216378).\n","status":"published","published":"2023-10-26T10:20:46Z","modified":"2026-02-04T03:30:59.012567Z","updated_at":"2026-11-02T15:53:53.865042Z"}]},"sources_more":{"osv":6}}