GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
10.1M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
2 rules matched. Showing 2 loaded rules.
Publish rule
CVE-2026-3381: Bundled Zlib Pre 1 3 2 Vulnerablecve-2026-3381-bundled-zlib-pre-1-3-2-vulnerable

Bundled zlib appears to be a pre-1.3.2 version (ZLIB_VERNUM < 0x1320 or ZLIB_VERSION string matches a pre-1.3.2 release such as "1.3.1.2-audit"). Versions prior to zlib 1.3.2 lack the 7ASecurity audit hardening fixes (CVE-2026-3381 / CVE-2026-27171): missing negative-length checks in crc32_combine, uninitialized-memory disclosure in inflateCopy/deflateCopy,

CCVE-2026-27171CVE-2026-3381CWE-1104CWE-908
by Provallyupdated 2026-06-12Apache-2.0
3K0 direct3K via packs
79
Crypto Import Pycryptogitlab-sast-python-crypto-rule-import-pycrypto

The application was detected importing `pycrypto`. This package has been deprecated as it contains security vulnerabilities. To remediate this issue, consider using the [cryptography](https://cryptography.io/) package instead.

PythonCWE-1104
by GitLab Security Productsupdated 2026-06-03MIT
3.1K0 direct3.1K via packs
92
All matching rules loaded.