Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/91979?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/91979?format=api", "purl": "pkg:rpm/redhat/ghostscript@9.27-16?arch=el8_10", "type": "rpm", "namespace": "redhat", "name": "ghostscript", "version": "9.27-16", "qualifiers": { "arch": "el8_10" }, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56851?format=api", "vulnerability_id": "VCID-7u9a-5pkt-4fbf", "summary": "Multiple vulnerabilities have been discovered in GPL Ghostscript, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-46956.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-46956.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-46956", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55675", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55608", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55634", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.5561", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55662", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55665", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55674", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55654", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55637", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-46956" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46956", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46956" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2325047", "reference_id": "2325047", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2325047" }, { "reference_url": "https://security.gentoo.org/glsa/202501-06", "reference_id": "GLSA-202501-06", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202501-06" }, { "reference_url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f4151f12db32cd3ed26c24327de714bf2c3ed6ca", "reference_id": "?id=f4151f12db32cd3ed26c24327de714bf2c3ed6ca", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T19:58:48Z/" } ], "url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f4151f12db32cd3ed26c24327de714bf2c3ed6ca" }, { "reference_url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html", "reference_id": "News.html", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T19:58:48Z/" } ], "url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:4362", "reference_id": "RHSA-2025:4362", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:4362" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7422", "reference_id": "RHSA-2025:7422", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7422" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7499", "reference_id": "RHSA-2025:7499", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7499" }, { "reference_url": "https://bugs.ghostscript.com/show_bug.cgi?id=707895", "reference_id": "show_bug.cgi?id=707895", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T19:58:48Z/" } ], "url": "https://bugs.ghostscript.com/show_bug.cgi?id=707895" }, { "reference_url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243942-1/", "reference_id": "suse-su-20243942-1", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T19:58:48Z/" } ], "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243942-1/" }, { "reference_url": "https://usn.ubuntu.com/7103-1/", "reference_id": "USN-7103-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7103-1/" }, { "reference_url": "https://usn.ubuntu.com/7138-1/", "reference_id": "USN-7138-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7138-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2024-46956" ], "risk_score": 3.5, "exploitability": "0.5", "weighted_severity": "7.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7u9a-5pkt-4fbf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56846?format=api", "vulnerability_id": "VCID-9q8n-jfqs-bkg6", "summary": "Multiple vulnerabilities have been discovered in GPL Ghostscript, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-46952.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-46952.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-46952", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00071", "scoring_system": "epss", "scoring_elements": "0.21684", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00071", "scoring_system": "epss", "scoring_elements": "0.21829", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00071", "scoring_system": "epss", "scoring_elements": "0.21882", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00071", "scoring_system": "epss", "scoring_elements": "0.21634", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00071", "scoring_system": "epss", "scoring_elements": "0.21711", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00071", "scoring_system": "epss", "scoring_elements": "0.21768", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00071", "scoring_system": "epss", "scoring_elements": "0.21781", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00071", "scoring_system": "epss", "scoring_elements": "0.21741", "published_at": "2026-04-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-46952" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2325041", "reference_id": "2325041", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2325041" }, { "reference_url": "https://security.gentoo.org/glsa/202501-06", "reference_id": "GLSA-202501-06", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202501-06" }, { "reference_url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b1f0827c30f59a2dcbc8a39e42cace7a1de35f7f", "reference_id": "?id=b1f0827c30f59a2dcbc8a39e42cace7a1de35f7f", "reference_type": "", "scores": [ { "value": "8.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T20:27:55Z/" } ], "url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b1f0827c30f59a2dcbc8a39e42cace7a1de35f7f" }, { "reference_url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html", "reference_id": "News.html", "reference_type": "", "scores": [ { "value": "8.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T20:27:55Z/" } ], "url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:4362", "reference_id": "RHSA-2025:4362", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:4362" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7422", "reference_id": "RHSA-2025:7422", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7422" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7499", "reference_id": "RHSA-2025:7499", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7499" }, { "reference_url": "https://bugs.ghostscript.com/show_bug.cgi?id=708001", "reference_id": "show_bug.cgi?id=708001", "reference_type": "", "scores": [ { "value": "8.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T20:27:55Z/" } ], "url": "https://bugs.ghostscript.com/show_bug.cgi?id=708001" }, { "reference_url": "https://usn.ubuntu.com/7103-1/", "reference_id": "USN-7103-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7103-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2024-46952" ], "risk_score": 3.8, "exploitability": "0.5", "weighted_severity": "7.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9q8n-jfqs-bkg6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56845?format=api", "vulnerability_id": "VCID-barv-t623-h3e5", "summary": "Multiple vulnerabilities have been discovered in GPL Ghostscript, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-46951.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-46951.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-46951", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00138", "scoring_system": "epss", "scoring_elements": "0.33956", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00138", "scoring_system": "epss", "scoring_elements": "0.34027", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00138", "scoring_system": "epss", "scoring_elements": "0.34057", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00138", "scoring_system": "epss", "scoring_elements": "0.33912", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00138", "scoring_system": "epss", "scoring_elements": "0.33955", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00138", "scoring_system": "epss", "scoring_elements": "0.33987", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00138", "scoring_system": "epss", "scoring_elements": "0.33985", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00138", "scoring_system": "epss", "scoring_elements": "0.33942", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00138", "scoring_system": "epss", "scoring_elements": "0.33919", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-46951" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46951", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46951" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2325043", "reference_id": "2325043", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2325043" }, { "reference_url": "https://security.gentoo.org/glsa/202501-06", "reference_id": "GLSA-202501-06", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202501-06" }, { "reference_url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa7d1362880673408a6fbe8719b4f8", "reference_id": "?id=f49812186baa7d1362880673408a6fbe8719b4f8", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T19:59:49Z/" } ], "url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa7d1362880673408a6fbe8719b4f8" }, { "reference_url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html", "reference_id": "News.html", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T19:59:49Z/" } ], "url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:4362", "reference_id": "RHSA-2025:4362", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:4362" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7422", "reference_id": "RHSA-2025:7422", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7422" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7499", "reference_id": "RHSA-2025:7499", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7499" }, { "reference_url": "https://bugs.ghostscript.com/show_bug.cgi?id=707991", "reference_id": "show_bug.cgi?id=707991", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T19:59:49Z/" } ], "url": "https://bugs.ghostscript.com/show_bug.cgi?id=707991" }, { "reference_url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243942-1/", "reference_id": "suse-su-20243942-1", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T19:59:49Z/" } ], "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243942-1/" }, { "reference_url": "https://usn.ubuntu.com/7103-1/", "reference_id": "USN-7103-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7103-1/" }, { "reference_url": "https://usn.ubuntu.com/7138-1/", "reference_id": "USN-7138-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7138-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2024-46951" ], "risk_score": 3.5, "exploitability": "0.5", "weighted_severity": "7.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-barv-t623-h3e5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56847?format=api", "vulnerability_id": "VCID-eypv-n5ea-abgn", "summary": "Multiple vulnerabilities have been discovered in GPL Ghostscript, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-46953.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-46953.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-46953", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00117", "scoring_system": "epss", "scoring_elements": "0.30624", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00117", "scoring_system": "epss", "scoring_elements": "0.30728", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00117", "scoring_system": "epss", "scoring_elements": "0.30776", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00117", "scoring_system": "epss", "scoring_elements": "0.30592", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00117", "scoring_system": "epss", "scoring_elements": "0.30651", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00117", "scoring_system": "epss", "scoring_elements": "0.30684", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00117", "scoring_system": "epss", "scoring_elements": "0.30688", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00117", "scoring_system": "epss", "scoring_elements": "0.30644", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00117", "scoring_system": "epss", "scoring_elements": "0.30598", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-46953" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46953", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46953" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2325045", "reference_id": "2325045", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2325045" }, { "reference_url": "https://security.gentoo.org/glsa/202501-06", "reference_id": "GLSA-202501-06", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202501-06" }, { "reference_url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1f21a45df0fa3abec4cff12951022b192dda3c00", "reference_id": "?id=1f21a45df0fa3abec4cff12951022b192dda3c00", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T19:59:32Z/" } ], "url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1f21a45df0fa3abec4cff12951022b192dda3c00" }, { "reference_url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html", "reference_id": "News.html", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T19:59:32Z/" } ], "url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:4362", "reference_id": "RHSA-2025:4362", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:4362" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7422", "reference_id": "RHSA-2025:7422", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7422" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7499", "reference_id": "RHSA-2025:7499", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7499" }, { "reference_url": "https://bugs.ghostscript.com/show_bug.cgi?id=707793", "reference_id": "show_bug.cgi?id=707793", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T19:59:32Z/" } ], "url": "https://bugs.ghostscript.com/show_bug.cgi?id=707793" }, { "reference_url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243942-1/", "reference_id": "suse-su-20243942-1", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T19:59:32Z/" } ], "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243942-1/" }, { "reference_url": "https://usn.ubuntu.com/7103-1/", "reference_id": "USN-7103-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7103-1/" }, { "reference_url": "https://usn.ubuntu.com/7138-1/", "reference_id": "USN-7138-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7138-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2024-46953" ], "risk_score": 3.5, "exploitability": "0.5", "weighted_severity": "7.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-eypv-n5ea-abgn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/81876?format=api", "vulnerability_id": "VCID-nsan-3rne-7fbw", "summary": "ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27792.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27792.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-27792", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00045", "scoring_system": "epss", "scoring_elements": "0.13853", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00045", "scoring_system": "epss", "scoring_elements": "0.13911", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00045", "scoring_system": "epss", "scoring_elements": "0.1376", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.16985", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.1694", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.16881", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.16817", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.16863", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.16953", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.1701", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-27792" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27792" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247179", "reference_id": "2247179", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247179" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:4362", "reference_id": "RHSA-2025:4362", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:4362" }, { "reference_url": "https://usn.ubuntu.com/5618-1/", "reference_id": "USN-5618-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5618-1/" }, { "reference_url": "https://usn.ubuntu.com/5643-1/", "reference_id": "USN-5643-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5643-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2020-27792" ], "risk_score": 3.2, "exploitability": "0.5", "weighted_severity": "6.4", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nsan-3rne-7fbw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56849?format=api", "vulnerability_id": "VCID-p7nb-9g3f-2bf3", "summary": "Multiple vulnerabilities have been discovered in GPL Ghostscript, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-46954.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-46954.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-46954", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00129", "scoring_system": "epss", "scoring_elements": "0.32293", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00129", "scoring_system": "epss", "scoring_elements": "0.32422", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00129", "scoring_system": "epss", "scoring_elements": "0.32247", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00129", "scoring_system": "epss", "scoring_elements": "0.32296", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00129", "scoring_system": "epss", "scoring_elements": "0.32326", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00129", "scoring_system": "epss", "scoring_elements": "0.32288", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00129", "scoring_system": "epss", "scoring_elements": "0.32258", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00129", "scoring_system": "epss", "scoring_elements": "0.32385", "published_at": "2026-04-02T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-46954" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2325044", "reference_id": "2325044", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2325044" }, { "reference_url": "https://security.gentoo.org/glsa/202501-06", "reference_id": "GLSA-202501-06", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202501-06" }, { "reference_url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=55f587dd039282316f512e1bea64218fd991f934", "reference_id": "?id=55f587dd039282316f512e1bea64218fd991f934", "reference_type": "", "scores": [ { "value": "8.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T20:24:52Z/" } ], "url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=55f587dd039282316f512e1bea64218fd991f934" }, { "reference_url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html", "reference_id": "News.html", "reference_type": "", "scores": [ { "value": "8.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T20:24:52Z/" } ], "url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:4362", "reference_id": "RHSA-2025:4362", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:4362" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7422", "reference_id": "RHSA-2025:7422", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7422" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7499", "reference_id": "RHSA-2025:7499", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7499" }, { "reference_url": "https://bugs.ghostscript.com/show_bug.cgi?id=707788", "reference_id": "show_bug.cgi?id=707788", "reference_type": "", "scores": [ { "value": "8.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-12T20:24:52Z/" } ], "url": "https://bugs.ghostscript.com/show_bug.cgi?id=707788" }, { "reference_url": "https://usn.ubuntu.com/7103-1/", "reference_id": "USN-7103-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7103-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2024-46954" ], "risk_score": 3.8, "exploitability": "0.5", "weighted_severity": "7.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-p7nb-9g3f-2bf3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/77917?format=api", "vulnerability_id": "VCID-wj1v-tg7c-8ydn", "summary": "ghostscript: dangling pointer in gdev_prn_open_printer_seekable()", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-46751.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-46751.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-46751", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29589", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29638", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.2946", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29522", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29562", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29564", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29519", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29467", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.29485", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-46751" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253365", "reference_id": "2253365", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253365" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:4362", "reference_id": "RHSA-2025:4362", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:4362" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7422", "reference_id": "RHSA-2025:7422", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7422" }, { "reference_url": "https://usn.ubuntu.com/6551-1/", "reference_id": "USN-6551-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6551-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2023-46751" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wj1v-tg7c-8ydn" } ], "fixing_vulnerabilities": [], "risk_score": "3.8", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ghostscript@9.27-16%3Farch=el8_10" }