gzip vulnerabilities
CVEs whose affected-version data names the gzip package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-41992High· 7.5⚖ disputedGNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution
GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array …
▾ Twilightgnu · gzipEPSS 0.62%via NVD
CVE-2022-1271High· 8.8An arbitrary file write vulnerability was found in GNU gzip's zgrep utility
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-s…
▾ Twilightgnu · gzipEPSS 5.5%via NVD