这是indexloc提供的服务,不要输入任何密码
Skip to content

[BUG] Zlib security identification #3285

@JoshuaDIntel

Description

@JoshuaDIntel

Description

SkiaSharp is showing up in our security idenificaiton software as utilizing zlib 1.2.13.1 which has the open CVE, CVE-2023-45853. This CVE in specific relates to Minizip. Can zlib either be updated to the latest 1.3.1 which has the fix or confirm that SkiaSharp does not use/include minizip?

Version of SkiaSharp

3.116.0 (Current)

Code of Conduct

  • I agree to follow this project's Code of Conduct

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    Status

    New

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions