Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-xftp-cy5m-nkhh
Summary
ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack
Using Magick to read a malicious SVG file resulted in a DoS attack.
Aliases
0
alias CVE-2025-68618
1
alias GHSA-p27m-hp98-6637
Fixed_packages
0
url pkg:deb/debian/imagemagick@8:6.9.11.60%2Bdfsg-1.3%2Bdeb11u4?distro=trixie
purl pkg:deb/debian/imagemagick@8:6.9.11.60%2Bdfsg-1.3%2Bdeb11u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hr11-5edt-5ugu
1
vulnerability VCID-z5ve-fkb6-8yhs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/imagemagick@8:6.9.11.60%252Bdfsg-1.3%252Bdeb11u4%3Fdistro=trixie
1
url pkg:deb/debian/imagemagick@8:6.9.11.60%2Bdfsg-1.3%2Bdeb11u8?distro=trixie
purl pkg:deb/debian/imagemagick@8:6.9.11.60%2Bdfsg-1.3%2Bdeb11u8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/imagemagick@8:6.9.11.60%252Bdfsg-1.3%252Bdeb11u8%3Fdistro=trixie
2
url pkg:deb/debian/imagemagick@8:6.9.11.60%2Bdfsg-1.6%2Bdeb12u5?distro=trixie
purl pkg:deb/debian/imagemagick@8:6.9.11.60%2Bdfsg-1.6%2Bdeb12u5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/imagemagick@8:6.9.11.60%252Bdfsg-1.6%252Bdeb12u5%3Fdistro=trixie
3
url pkg:deb/debian/imagemagick@8:6.9.11.60%2Bdfsg-1.6%2Bdeb12u9?distro=trixie
purl pkg:deb/debian/imagemagick@8:6.9.11.60%2Bdfsg-1.6%2Bdeb12u9?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-z5ve-fkb6-8yhs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/imagemagick@8:6.9.11.60%252Bdfsg-1.6%252Bdeb12u9%3Fdistro=trixie
4
url pkg:deb/debian/imagemagick@8:7.1.1.43%2Bdfsg1-1%2Bdeb13u4?distro=trixie
purl pkg:deb/debian/imagemagick@8:7.1.1.43%2Bdfsg1-1%2Bdeb13u4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/imagemagick@8:7.1.1.43%252Bdfsg1-1%252Bdeb13u4%3Fdistro=trixie
5
url pkg:deb/debian/imagemagick@8:7.1.1.43%2Bdfsg1-1%2Bdeb13u8?distro=trixie
purl pkg:deb/debian/imagemagick@8:7.1.1.43%2Bdfsg1-1%2Bdeb13u8?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-z5ve-fkb6-8yhs
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/imagemagick@8:7.1.1.43%252Bdfsg1-1%252Bdeb13u8%3Fdistro=trixie
6
url pkg:deb/debian/imagemagick@8:7.1.2.12%2Bdfsg1-1?distro=trixie
purl pkg:deb/debian/imagemagick@8:7.1.2.12%2Bdfsg1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/imagemagick@8:7.1.2.12%252Bdfsg1-1%3Fdistro=trixie
7
url pkg:deb/debian/imagemagick@8:7.1.2.23%2Bdfsg1-1?distro=trixie
purl pkg:deb/debian/imagemagick@8:7.1.2.23%2Bdfsg1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/imagemagick@8:7.1.2.23%252Bdfsg1-1%3Fdistro=trixie
8
url pkg:deb/debian/imagemagick@8:7.1.2.24%2Bdfsg1-1?distro=trixie
purl pkg:deb/debian/imagemagick@8:7.1.2.24%2Bdfsg1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/imagemagick@8:7.1.2.24%252Bdfsg1-1%3Fdistro=trixie
9
url pkg:nuget/magick.net-q16-anycpu@14.10.1
purl pkg:nuget/magick.net-q16-anycpu@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q16-anycpu@14.10.1
10
url pkg:nuget/Magick.NET-Q16-AnyCPU@14.10.1
purl pkg:nuget/Magick.NET-Q16-AnyCPU@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-AnyCPU@14.10.1
11
url pkg:nuget/Magick.NET-Q16-arm64@14.10.1
purl pkg:nuget/Magick.NET-Q16-arm64@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-arm64@14.10.1
12
url pkg:nuget/magick.net-q16-hdri-anycpu@14.10.1
purl pkg:nuget/magick.net-q16-hdri-anycpu@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q16-hdri-anycpu@14.10.1
13
url pkg:nuget/Magick.NET-Q16-HDRI-AnyCPU@14.10.1
purl pkg:nuget/Magick.NET-Q16-HDRI-AnyCPU@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-HDRI-AnyCPU@14.10.1
14
url pkg:nuget/Magick.NET-Q16-HDRI-arm64@14.10.1
purl pkg:nuget/Magick.NET-Q16-HDRI-arm64@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-HDRI-arm64@14.10.1
15
url pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-arm64@14.10.1
purl pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-arm64@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-arm64@14.10.1
16
url pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-x64@14.10.1
purl pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-x64@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-x64@14.10.1
17
url pkg:nuget/Magick.NET-Q16-HDRI-x64@14.10.1
purl pkg:nuget/Magick.NET-Q16-HDRI-x64@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-HDRI-x64@14.10.1
18
url pkg:nuget/Magick.NET-Q16-HDRI-x86@14.10.1
purl pkg:nuget/Magick.NET-Q16-HDRI-x86@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-HDRI-x86@14.10.1
19
url pkg:nuget/Magick.NET-Q16-OpenMP-arm64@14.10.1
purl pkg:nuget/Magick.NET-Q16-OpenMP-arm64@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-OpenMP-arm64@14.10.1
20
url pkg:nuget/Magick.NET-Q16-OpenMP-x64@14.10.1
purl pkg:nuget/Magick.NET-Q16-OpenMP-x64@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-OpenMP-x64@14.10.1
21
url pkg:nuget/magick.net-q16-x64@14.10.1
purl pkg:nuget/magick.net-q16-x64@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q16-x64@14.10.1
22
url pkg:nuget/Magick.NET-Q16-x64@14.10.1
purl pkg:nuget/Magick.NET-Q16-x64@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-x64@14.10.1
23
url pkg:nuget/Magick.NET-Q16-x86@14.10.1
purl pkg:nuget/Magick.NET-Q16-x86@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-x86@14.10.1
24
url pkg:nuget/magick.net-q8-anycpu@14.10.1
purl pkg:nuget/magick.net-q8-anycpu@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q8-anycpu@14.10.1
25
url pkg:nuget/Magick.NET-Q8-AnyCPU@14.10.1
purl pkg:nuget/Magick.NET-Q8-AnyCPU@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q8-AnyCPU@14.10.1
26
url pkg:nuget/Magick.NET-Q8-arm64@14.10.1
purl pkg:nuget/Magick.NET-Q8-arm64@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q8-arm64@14.10.1
27
url pkg:nuget/Magick.NET-Q8-OpenMP-arm64@14.10.1
purl pkg:nuget/Magick.NET-Q8-OpenMP-arm64@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q8-OpenMP-arm64@14.10.1
28
url pkg:nuget/magick.net-q8-openmp-x64@14.10.1
purl pkg:nuget/magick.net-q8-openmp-x64@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/magick.net-q8-openmp-x64@14.10.1
29
url pkg:nuget/Magick.NET-Q8-OpenMP-x64@14.10.1
purl pkg:nuget/Magick.NET-Q8-OpenMP-x64@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q8-OpenMP-x64@14.10.1
30
url pkg:nuget/Magick.NET-Q8-x86@14.10.1
purl pkg:nuget/Magick.NET-Q8-x86@14.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q8-x86@14.10.1
Affected_packages
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-68618.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-68618.json
1
reference_url https://github.com/ImageMagick/ImageMagick
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ImageMagick/ImageMagick
2
reference_url https://github.com/ImageMagick/ImageMagick/commit/6f431d445f3ddd609c004a1dde617b0a73e60beb
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ImageMagick/ImageMagick/commit/6f431d445f3ddd609c004a1dde617b0a73e60beb
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2426285
reference_id 2426285
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2426285
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-68618
reference_id CVE-2025-68618
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-68618
5
reference_url https://github.com/advisories/GHSA-p27m-hp98-6637
reference_id GHSA-p27m-hp98-6637
reference_type
scores
url https://github.com/advisories/GHSA-p27m-hp98-6637
6
reference_url https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p27m-hp98-6637
reference_id GHSA-p27m-hp98-6637
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p27m-hp98-6637
Weaknesses
0
cwe_id 674
name Uncontrolled Recursion
description The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-xftp-cy5m-nkhh