New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVE-2023-45853 (zlib) found on v20.x #160

Closed

github-actions bot opened this issue Oct 20, 2023 · 3 comments

Labels

dont-believe-affects-nodejs v20.x

github-actions bot commented Oct 20, 2023

A new vulnerability for zlib 1.2.13.1-motley was found:
Vulnerability ID: CVE-2023-45853
Vulnerability URL: https://nvd.nist.gov/vuln/detail/CVE-2023-45853
Failed run: https://github.com/nodejs/nodejs-dependency-vuln-assessments/actions/runs/6581614069

github-actions bot added the v20.x label

Neustradamus commented Oct 21, 2023

Linked to:

Please release 1.3.1 to fix CVE-2023-45853 (9.8 CRITICAL) madler/zlib#868

RafaelGSS added the dont-believe-affects-nodejs label

Member

RafaelGSS commented Oct 23, 2023

Ref: #161 (comment)

mhdawson closed this as completed

mhdawson reopened this

mhdawson mentioned this issue

CVE-2023-45853 (zlib) found on v20.x #182

Closed

Member

mhdawson commented Mar 27, 2024

From the scan, believe this was fixed in the latest release.

mhdawson closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment