Consultation on CVE-2018-25032

[wangmomo1126]

Details

The zlib version bundled with the latest available Node.js may be affected by CVE-2018-25032, a high-severity security vulnerability that's being re-analyzed by NVD. However, there's a more recent version of zlib that is unaffected by said vulnerability (version 1.2.12).
Our project uses Node.js as a third-party component and this vulnerability was detected by one of our security scanners and we want to make the Node.js community aware of this situation.I want to know if nodejs version 14.x is affected by this vulnerability

Node.js version

14.21.1

Example code

No response

Operating system

linux

Scope

Open Source Vulnerabilities

Module and version

zlib

[bmuenzenmeyer]

closing this per the resolution mentioned within nodejs/security-wg#792