Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2016-9842 — HIGH severity vulnerability | Release Alert

CVE-2016-9842

8.8

HIGHCVSS v3

Published

May 23, 2017

CVSS v2

6.8 MEDIUM

Affected

7 projects

Assigned by

[email protected]

Severity scale

010

Description

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

NPMSimple, synchronous deflate/inflate for buffers

= *, >= 1.2.3.4, < 1.2.9NVD

GitHubA massively spiffy yet delicately unobtrusive compression library.

= *, >= 1.2.3.4, < 1.2.9NVD

cloudflare/zlib

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Cloudflare fork of zlib with massive performance improvements

= *, >= 1.2.3.4, < 1.2.9NVD

Python Package IndexPython bindings and utils for Node.js and io.js

>= 4.0.0, <= 4.1.2, >= 6.0.0, <= 6.8.1, >= 4.2.0, < 4.8.2, >= 6.9.0, < 6.10.2, >= 7.0.0, < 7.6.0NVD

NPM

>= 4.0.0, <= 4.1.2, >= 6.0.0, <= 6.8.1, >= 4.2.0, < 4.8.2, >= 6.9.0, < 6.10.2, >= 7.0.0, < 7.6.0NVD

NuGet GalleryNode.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. Node.js' package ecosystem, npm, is the largest ecosystem of open source libraries in the world.

>= 4.0.0, <= 4.1.2, >= 6.0.0, <= 6.8.1, >= 4.2.0, < 4.8.2, >= 6.9.0, < 6.10.2, >= 7.0.0, < 7.6.0NVD

GitHubRuby interface for the zlib compression/decompression library

= *, >= 1.2.3.4, < 1.2.9NVD