{"schema":"threatline.record/2","record":{"id":"CVE-2026-56371","aliases":["GHSA-3q5f-gmjc-38r8"],"summary":"ImageMagick: Memory leak in coders/txt.c without freetype","details":"If a `texture` attribute is specified for a TXT file, an attempt will be made to read it via `texture=ReadImage(read_info,exception);`. Later, when retrieving metrics via the `GetTypeMetrics` function, if this function fails (i.e., `status == MagickFalse`), the calling function will exit immediately but fail to release the texture object, leading to memory leakage.","categories":["Libraries & packages"],"product":"Magick.NET-Q16-AnyCPU","vendor":"ImageMagick","ecosystem":"nuget","affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-AnyCPU"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-AnyCPU"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-OpenMP-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-OpenMP-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-x86"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-x86"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-x86"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-AnyCPU"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-OpenMP-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-OpenMP-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-x86"},"range":"< 14.10.3"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56371","source_modified_at":"2026-07-02T14:07:00.792Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"ImageMagick","vendor":"ImageMagick","versions":[{"version":"0","status":"affected","versionType":"semver","lessThan":"7.1.2-15"},{"version":"7.1.2-15","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56371","source_modified_at":"2026-07-02T14:07:00.792Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"ImageMagick","vendor":"ImageMagick","versions":[{"version":"0","status":"affected","versionType":"semver","lessThan":"6.9.13-40"},{"version":"6.9.13-40","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-AnyCPU","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-AnyCPU"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.8.1001","6.8.9.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-AnyCPU","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-AnyCPU"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.9.101","6.8.9.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-OpenMP-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-arm64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-OpenMP-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-x64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","7.14.0","7.14.0.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-arm64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-x64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.9.101","6.8.9.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-x86"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.9.101","6.8.9.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-OpenMP-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-arm64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-OpenMP-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-x64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","7.14.0","7.14.0.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-OpenMP-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-x86"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-arm64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-x64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.5.1001","6.8.5.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-x86"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.5.1001","6.8.5.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-AnyCPU","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-AnyCPU"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.8.1001","6.8.9.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-OpenMP-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-OpenMP-arm64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-OpenMP-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-OpenMP-x64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","7.14.0","7.14.0.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-arm64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-x64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.5.1001","6.8.5.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-x86"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.5.1001","6.8.5.401"]}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-AnyCPU"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-AnyCPU"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-OpenMP-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-OpenMP-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-x86"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-x86"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-x86"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-AnyCPU"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-OpenMP-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-OpenMP-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:03:27Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-x86"},"version":"14.10.3"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56371","source_modified_at":"2026-07-02T14:07:00.792Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"ImageMagick","ecosystem":null},"version":"7.1.2-15","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56371","source_modified_at":"2026-07-02T14:07:00.792Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"ImageMagick","ecosystem":null},"version":"6.9.13-40","basis":"first unaffected version stated in the CVE record"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-AnyCPU","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-AnyCPU"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-AnyCPU","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-AnyCPU"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-OpenMP-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-OpenMP-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-x86"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-OpenMP-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-OpenMP-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-OpenMP-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-x86"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-x86"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-AnyCPU","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-AnyCPU"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-OpenMP-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-OpenMP-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-OpenMP-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-OpenMP-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","source_modified_at":"2026-09-24T20:15:10.957053413Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-x86"},"version":"14.10.3"}],"cvss":6.9,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.0044,"percentile":0.37189,"score_date":"2026-10-23"},"published_at":"2026-06-23T12:13:04.085Z","modified_at":"2026-09-24T20:15:10.957053413Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-09-24T20:03:27Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-56371","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-07-02T14:07:00.792Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-3q5f-gmjc-38r8","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-09-24T20:15:10.957053413Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-56371","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["GitHub Advisory Database","CVE List","OSV","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3q5f-gmjc-38r8","tags":["vendor-advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/e6394098af39a9689bb5f0b4eb6a9968e449a8d3","source":"GitHub Advisory Database"},{"url":"https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3","source":"GitHub Advisory Database"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56371","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/imagemagick-memory-leak-in-txt-file-processing-via-texture-attribute","tags":["third-party-advisory"]},{"url":"https://github.com/advisories/GHSA-3q5f-gmjc-38r8","source":"GitHub Advisory Database"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"partial","assessed_at":"2026-06-24T15:43:57.913723Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-09-24T20:15:10.957053413Z","content_hash":"779737c5a2c1d800b36b7b378463b49d6936b12991dc968fdd4ae22bd6dff4b7"}}