Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-27171
2.9
LOWCVSS v3
Published
February 18, 2026
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.
NPM
kpanuragh/zlib
GitHubPure javascript implementation of Zlib nodejs core module.The zlib module provides compression functionality implemented using Gzip and Deflate/Inflate.
GitHubPure javascript implementation of Zlib nodejs core module.The zlib module provides compression functionality implemented using Gzip and Deflate/Inflate.= *, >= 1.2.12, < 1.3.2NVD