Lookup for vulnerable packages by Package URL.

GET /api/packages/74603?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/74603?format=api",
    "purl": "pkg:nuget/magick.net-q16-anycpu@14.10.4",
    "type": "nuget",
    "namespace": "",
    "name": "magick.net-q16-anycpu",
    "version": "14.10.4",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": false,
    "next_non_vulnerable_version": null,
    "latest_non_vulnerable_version": null,
    "affected_by_vulnerabilities": [],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/50887?format=api",
            "vulnerability_id": "VCID-cnvc-vfa2-z3fq",
            "summary": "ImageMagick has Heap Buffer Over-Read in BilateralBlurImage\nBilateralBlurImage contains a heap buffer over-read caused by an incorrect conversion. When processing a crafted image with the `-bilateral-blur` operation an out of bounds read can occur.\n\n```\n=================================================================\n==676172==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x50a0000079c0 at pc 0x57b483c722f7 bp 0x7fffc0acd380 sp 0x7fffc0acd370\nREAD of size 4 at 0x50a0000079c0 thread T0\n```",
            "references": [
                {
                    "reference_url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30935",
                    "reference_id": "CVE-2026-30935",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30935"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-cqw9-w2m7-r2m2",
                    "reference_id": "GHSA-cqw9-w2m7-r2m2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-cqw9-w2m7-r2m2"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cqw9-w2m7-r2m2",
                    "reference_id": "GHSA-cqw9-w2m7-r2m2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cqw9-w2m7-r2m2"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/74603?format=api",
                    "purl": "pkg:nuget/magick.net-q16-anycpu@14.10.4",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q16-anycpu@14.10.4"
                }
            ],
            "aliases": [
                "CVE-2026-30935",
                "GHSA-cqw9-w2m7-r2m2"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cnvc-vfa2-z3fq"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/50786?format=api",
            "vulnerability_id": "VCID-j589-992a-jfa7",
            "summary": "ImageMagick has a Path Policy TOCTOU symlink race bypass\n`domain=\"path\"` authorization is checked before final file open/use. A symlink swap between check-time and use-time bypasses policy-denied read/write.",
            "references": [
                {
                    "reference_url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28689",
                    "reference_id": "CVE-2026-28689",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28689"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-493f-jh8w-qhx3",
                    "reference_id": "GHSA-493f-jh8w-qhx3",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-493f-jh8w-qhx3"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-493f-jh8w-qhx3",
                    "reference_id": "GHSA-493f-jh8w-qhx3",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-493f-jh8w-qhx3"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/74603?format=api",
                    "purl": "pkg:nuget/magick.net-q16-anycpu@14.10.4",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q16-anycpu@14.10.4"
                }
            ],
            "aliases": [
                "CVE-2026-28689",
                "GHSA-493f-jh8w-qhx3"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j589-992a-jfa7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/50908?format=api",
            "vulnerability_id": "VCID-m8u5-3zy6-zyh8",
            "summary": "ImageMagick has heap use-after-free in the MSL encoder\nA heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write capability has been removed.\n\n```\nSUMMARY: AddressSanitizer: heap-use-after-free MagickCore/image.c:1195 in DestroyImage\nShadow bytes around the buggy address:\n0x0a4e80007450: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n0x0a4e80007460: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n0x0a4e80007470: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n0x0a4e80007480: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n0x0a4e80007490: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n=>0x0a4e800074a0: fd fd fd fd fd fd fd fd fd fd[fd]fd fd fd fd fd\n0x0a4e800074b0: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa\n0x0a4e800074c0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n0x0a4e800074d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n0x0a4e800074e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n0x0a4e800074f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n```",
            "references": [
                {
                    "reference_url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28688",
                    "reference_id": "CVE-2026-28688",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28688"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-xxw5-m53x-j38c",
                    "reference_id": "GHSA-xxw5-m53x-j38c",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-xxw5-m53x-j38c"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxw5-m53x-j38c",
                    "reference_id": "GHSA-xxw5-m53x-j38c",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxw5-m53x-j38c"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/74603?format=api",
                    "purl": "pkg:nuget/magick.net-q16-anycpu@14.10.4",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q16-anycpu@14.10.4"
                }
            ],
            "aliases": [
                "CVE-2026-28688",
                "GHSA-xxw5-m53x-j38c"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m8u5-3zy6-zyh8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/50785?format=api",
            "vulnerability_id": "VCID-nfr9-r9x3-4ugt",
            "summary": "ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder\nIn MAT decoder uses 32-bit arithmetic due to incorrect parenthesization resulting in a heap over-read.\n\n```\n=================================================================\n==969652==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x506000003b40 at pc 0x555557b2a926 bp 0x7fffffff4c80 sp 0x7fffffff4c70\nREAD of size 8 at 0x506000003b40 thread T0\n```",
            "references": [
                {
                    "reference_url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28692",
                    "reference_id": "CVE-2026-28692",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28692"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-mrmj-x24c-wwcv",
                    "reference_id": "GHSA-mrmj-x24c-wwcv",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-mrmj-x24c-wwcv"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mrmj-x24c-wwcv",
                    "reference_id": "GHSA-mrmj-x24c-wwcv",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mrmj-x24c-wwcv"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/74603?format=api",
                    "purl": "pkg:nuget/magick.net-q16-anycpu@14.10.4",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q16-anycpu@14.10.4"
                }
            ],
            "aliases": [
                "CVE-2026-28692",
                "GHSA-mrmj-x24c-wwcv"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nfr9-r9x3-4ugt"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/50906?format=api",
            "vulnerability_id": "VCID-nxzm-r956-pbfy",
            "summary": "ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder\nAn integer overflow vulnerability exists in the SIXEL decoer. The vulnerability allows an attacker to perform an out of bounds via a specially crafted mage.",
            "references": [
                {
                    "reference_url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28493",
                    "reference_id": "CVE-2026-28493",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28493"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-r39q-jr8h-gcq2",
                    "reference_id": "GHSA-r39q-jr8h-gcq2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-r39q-jr8h-gcq2"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r39q-jr8h-gcq2",
                    "reference_id": "GHSA-r39q-jr8h-gcq2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r39q-jr8h-gcq2"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/74603?format=api",
                    "purl": "pkg:nuget/magick.net-q16-anycpu@14.10.4",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q16-anycpu@14.10.4"
                }
            ],
            "aliases": [
                "CVE-2026-28493",
                "GHSA-r39q-jr8h-gcq2"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nxzm-r956-pbfy"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/50880?format=api",
            "vulnerability_id": "VCID-qrsw-ekum-zue2",
            "summary": "ImageMagick has heap-based buffer overflow in UHDR encoder\nA heap-based buffer overflow in the UHDR encoder can happen due to truncation of a value and it would allow an out of bounds write.\n\n```\n================================================================\n==2158399==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x521000039500 at pc 0x562a4a42f968 bp 0x7ffcca4ed6c0 sp 0x7ffcca4ed6b0\nWRITE of size 1 at 0x521000039500 thread T0\n```",
            "references": [
                {
                    "reference_url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30931",
                    "reference_id": "CVE-2026-30931",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30931"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-h95r-c8c7-mrwx",
                    "reference_id": "GHSA-h95r-c8c7-mrwx",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-h95r-c8c7-mrwx"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h95r-c8c7-mrwx",
                    "reference_id": "GHSA-h95r-c8c7-mrwx",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h95r-c8c7-mrwx"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/74603?format=api",
                    "purl": "pkg:nuget/magick.net-q16-anycpu@14.10.4",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q16-anycpu@14.10.4"
                }
            ],
            "aliases": [
                "CVE-2026-30931",
                "GHSA-h95r-c8c7-mrwx"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qrsw-ekum-zue2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/50881?format=api",
            "vulnerability_id": "VCID-t7w8-fz8u-zud8",
            "summary": "ImageMagick has stack buffer overflow in MagnifyImage\nMagnifyImage uses a fixed-size stack buffer. When using a specific image it is possible to overflow this buffer and corrupt the stack.",
            "references": [
                {
                    "reference_url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30929",
                    "reference_id": "CVE-2026-30929",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30929"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-rqq8-jh93-f4vg",
                    "reference_id": "GHSA-rqq8-jh93-f4vg",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-rqq8-jh93-f4vg"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rqq8-jh93-f4vg",
                    "reference_id": "GHSA-rqq8-jh93-f4vg",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rqq8-jh93-f4vg"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/74603?format=api",
                    "purl": "pkg:nuget/magick.net-q16-anycpu@14.10.4",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q16-anycpu@14.10.4"
                }
            ],
            "aliases": [
                "CVE-2026-30929",
                "GHSA-rqq8-jh93-f4vg"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-t7w8-fz8u-zud8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/50787?format=api",
            "vulnerability_id": "VCID-vk9r-ve4j-w7g2",
            "summary": "ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder\nAn overflow on  32-bit systems can cause a crash in the SFW decoder when processing extremely large images.",
            "references": [
                {
                    "reference_url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31853",
                    "reference_id": "CVE-2026-31853",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31853"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-56jp-jfqg-f8f4",
                    "reference_id": "GHSA-56jp-jfqg-f8f4",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-56jp-jfqg-f8f4"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-56jp-jfqg-f8f4",
                    "reference_id": "GHSA-56jp-jfqg-f8f4",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-56jp-jfqg-f8f4"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/74603?format=api",
                    "purl": "pkg:nuget/magick.net-q16-anycpu@14.10.4",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q16-anycpu@14.10.4"
                }
            ],
            "aliases": [
                "CVE-2026-31853",
                "GHSA-56jp-jfqg-f8f4"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vk9r-ve4j-w7g2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/50899?format=api",
            "vulnerability_id": "VCID-x85h-m4tr-ykha",
            "summary": "ImageMagick vulnerable to stack corruption through long morphology kernel names or arrays\nA stack buffer overflow exists in ImageMagick's morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-size stack buffers via memcpy without bounds checking, resulting in stack corruption.",
            "references": [
                {
                    "reference_url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28494",
                    "reference_id": "CVE-2026-28494",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28494"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-932h-jw47-73jm",
                    "reference_id": "GHSA-932h-jw47-73jm",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-932h-jw47-73jm"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-932h-jw47-73jm",
                    "reference_id": "GHSA-932h-jw47-73jm",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-932h-jw47-73jm"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/74603?format=api",
                    "purl": "pkg:nuget/magick.net-q16-anycpu@14.10.4",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q16-anycpu@14.10.4"
                }
            ],
            "aliases": [
                "CVE-2026-28494",
                "GHSA-932h-jw47-73jm"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x85h-m4tr-ykha"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/50784?format=api",
            "vulnerability_id": "VCID-xuxk-mcdm-q3fr",
            "summary": "ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder\nAn extremely large image profile could result in a heap overflow when encoding a PNG image.",
            "references": [
                {
                    "reference_url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30883",
                    "reference_id": "CVE-2026-30883",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30883"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-qmw5-2p58-xvrc",
                    "reference_id": "GHSA-qmw5-2p58-xvrc",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-qmw5-2p58-xvrc"
                },
                {
                    "reference_url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qmw5-2p58-xvrc",
                    "reference_id": "GHSA-qmw5-2p58-xvrc",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qmw5-2p58-xvrc"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/74603?format=api",
                    "purl": "pkg:nuget/magick.net-q16-anycpu@14.10.4",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q16-anycpu@14.10.4"
                }
            ],
            "aliases": [
                "CVE-2026-30883",
                "GHSA-qmw5-2p58-xvrc"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xuxk-mcdm-q3fr"
        }
    ],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q16-anycpu@14.10.4"
}