{"schema":"threatline.record/2","record":{"id":"CVE-2026-56379","aliases":["GHSA-xpg8-7m6m-jf56"],"summary":"ImageMagick: SVG-to-MVG Command Injection via coders/svg.c","details":"An attacker can inject arbitrary MVG (Magick Vector Graphics) drawing commands in an SVG file that is read by the internal SVG decoder of ImageMagick. The injected MVG commands execute during rendering.","categories":["Libraries & packages"],"product":"Magick.NET-Q16-AnyCPU","vendor":"ImageMagick","ecosystem":"nuget","affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-AnyCPU"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-AnyCPU"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-OpenMP-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-OpenMP-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-x86"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-x86"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-x86"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-AnyCPU"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-OpenMP-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-OpenMP-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-x86"},"range":"< 14.10.3"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56379","source_modified_at":"2026-07-15T00:42:36.269Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"ImageMagick","vendor":"ImageMagick","versions":[{"version":"0","status":"affected","versionType":"semver","lessThan":"7.1.2-15"},{"version":"7.1.2-15","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56379","source_modified_at":"2026-07-15T00:42:36.269Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"ImageMagick","vendor":"ImageMagick","versions":[{"version":"0","status":"affected","versionType":"semver","lessThan":"6.9.13-40"},{"version":"6.9.13-40","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-AnyCPU","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-AnyCPU"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.8.1001","6.8.9.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-AnyCPU","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-AnyCPU"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.9.101","6.8.9.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-OpenMP-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-arm64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-OpenMP-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-x64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","7.14.0","7.14.0.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-arm64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-x64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.9.101","6.8.9.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-x86"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.9.101","6.8.9.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-OpenMP-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-arm64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-OpenMP-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-x64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","7.14.0","7.14.0.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-OpenMP-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-x86"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-arm64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-x64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.5.1001","6.8.5.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-x86"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.5.1001","6.8.5.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-AnyCPU","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-AnyCPU"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.8.1001","6.8.9.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-OpenMP-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-OpenMP-arm64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-OpenMP-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-OpenMP-x64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","7.14.0","7.14.0.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-arm64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-x64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.5.1001","6.8.5.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-x86"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.10.3"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.5.1001","6.8.5.401"]}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-AnyCPU"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-AnyCPU"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-OpenMP-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-OpenMP-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-x86"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-x86"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-x86"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-AnyCPU"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-OpenMP-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-OpenMP-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:05:07Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-x86"},"version":"14.10.3"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56379","source_modified_at":"2026-07-15T00:42:36.269Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"ImageMagick","ecosystem":null},"version":"7.1.2-15","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56379","source_modified_at":"2026-07-15T00:42:36.269Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"ImageMagick","ecosystem":null},"version":"6.9.13-40","basis":"first unaffected version stated in the CVE record"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-AnyCPU","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-AnyCPU"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-AnyCPU","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-AnyCPU"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-OpenMP-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-OpenMP-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-HDRI-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-HDRI-x86"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-OpenMP-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-OpenMP-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-OpenMP-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-x86"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q16-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q16-x86"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-AnyCPU","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-AnyCPU"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-OpenMP-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-OpenMP-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-OpenMP-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-OpenMP-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-arm64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-x64","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","source_modified_at":"2026-09-24T20:15:11.619336121Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Magick.NET-Q8-x86","ecosystem":"NuGet","purl":"pkg:nuget/Magick.NET-Q8-x86"},"version":"14.10.3"}],"cvss":9.2,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.01643,"percentile":0.76244,"score_date":"2026-10-23"},"published_at":"2026-06-23T12:13:05.492Z","modified_at":"2026-09-24T20:15:11.619336121Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-09-24T20:05:07Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-56379","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-07-15T00:42:36.269Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-09-24T20:15:11.619336121Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-56379","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["GitHub Advisory Database","CVE List","OSV","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xpg8-7m6m-jf56","tags":["vendor-advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/9db96365ecab5de69cdec81b9359672b3a827aaa","source":"GitHub Advisory Database"},{"url":"https://github.com/ImageMagick/ImageMagick/commit/f63c78b3828933f1cc7cf499390248981af765aa","source":"GitHub Advisory Database"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56379","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://access.redhat.com/errata/RHSA-2026:32961","tags":["vendor-advisory","x_refsource_REDHAT"]},{"source":"CVE List","url":"https://access.redhat.com/security/cve/CVE-2026-56379","tags":["vdb-entry","x_refsource_REDHAT"]},{"source":"CVE List","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491700","tags":["issue-tracking","x_refsource_REDHAT"]},{"source":"CVE List","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56379.json","tags":["x_sadp-csaf-vex"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/imagemagick-command-injection-via-svg-decoder","tags":["third-party-advisory"]},{"url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","source":"GitHub Advisory Database"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"partial","assessed_at":"2026-06-23T13:58:05.952386Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-09-24T20:15:11.619336121Z","content_hash":"c6f569cc5336e14060cf4c1118e7553c34dff44de5ffa5f06e4acd1d3fb4d8e8"}}