cbcvebase.

Ruby Zlib vulnerabilities

1 known vulnerability affecting ruby/zlib.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-27820P2CRITICALCVSS 9.8fixed in 3.0.1v>= 3.1.0, < 3.1.2+1 more2026-04-16
CVE-2026-27820 [CRITICAL] CWE-120 CVE-2026-27820: zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3 zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has en
nvd
Ruby Zlib vulnerabilities | cvebase