Known Vulnerabilities for Zlib by Ruby
Listed below are 10 of the newest known vulnerabilities associated with "Zlib" by "Ruby".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114102 json | adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.js pr... | Not Provided | 2026-10-21 | 2026-10-22 |
| CVE-2026-105274 json | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted reposito... | Not Provided | 2026-10-12 | 2026-10-15 |
| CVE-2026-102560 json | A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, trunca... | Not Provided | 2026-09-29 | 2026-10-22 |
| CVE-2026-100723 json | vm2 before 3.12.2 does not apply its Buffer backing-store ownership invariant (byteOffset === 0 and buffer.byteLength === len... | Not Provided | 2026-09-27 | 2026-10-01 |
| CVE-2026-96618 json | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package mirro... | Not Provided | 2026-10-12 | 2026-10-16 |
| CVE-2026-93471 json | Improper Handling of Highly Compressed Data (Data Amplification) in esaml_binding in dropbox esaml allows an unauthenticated ... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-92000 json | adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompress... | Not Provided | 2026-09-15 | 2026-09-24 |
| CVE-2026-91135 json | Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB trans... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-89717 json | In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_destroy_com... | Not Provided | 2026-09-11 | 2026-10-21 |
| CVE-2026-87776 json | compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection wh... | Not Provided | 2026-09-11 | 2026-09-11 |