Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:apk/alpine/mupdf@1.10a-r2?arch=x86_64&distroversion=v3.7&reponame=main

Type apk

Namespace alpine

Name mupdf

Version 1.10a-r2

Qualifiers

arch	x86_64
distroversion	v3.7
reponame	main

Subpath

Is_vulnerable false

Next_non_vulnerable_version 1.11-r1

Latest_non_vulnerable_version 1.13-r0

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-sjug-t5xz-1bfa

vulnerability_id VCID-sjug-t5xz-1bfa

summary An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fz_paint_pixmap_with_mask painting operation. Versions 1.11 and later are unaffected.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2017-5991

reference_id

reference_type

scores

value	0.33179
scoring_system	epss
scoring_elements	0.96997
published_at	2026-06-04T12:55:00Z

value	0.33179
scoring_system	epss
scoring_elements	0.97001
published_at	2026-06-05T12:55:00Z

value	0.33179
scoring_system	epss
scoring_elements	0.97003
published_at	2026-06-06T12:55:00Z

value	0.33179
scoring_system	epss
scoring_elements	0.97005
published_at	2026-06-07T12:55:00Z

value	0.33179
scoring_system	epss
scoring_elements	0.97004
published_at	2026-06-08T12:55:00Z

value	0.33179
scoring_system	epss
scoring_elements	0.97008
published_at	2026-06-09T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2017-5991

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8674
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8674

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5896
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5896

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5991
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5991

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7264
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7264

reference_url	https://bugs.ghostscript.com/show_bug.cgi?id=697500
reference_id	CVE-2017-5991
reference_type	exploit
scores
url	https://bugs.ghostscript.com/show_bug.cgi?id=697500

reference_url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/42138.txt
reference_id	CVE-2017-5991
reference_type	exploit
scores
url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/42138.txt

reference_url	https://security.gentoo.org/glsa/201706-08
reference_id	GLSA-201706-08
reference_type
scores
url	https://security.gentoo.org/glsa/201706-08

fixed_packages

url	pkg:apk/alpine/mupdf@1.10a-r2?arch=x86_64&distroversion=v3.7&reponame=main
purl	pkg:apk/alpine/mupdf@1.10a-r2?arch=x86_64&distroversion=v3.7&reponame=main
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mupdf@1.10a-r2%3Farch=x86_64&distroversion=v3.7&reponame=main

aliases CVE-2017-5991

risk_score 0.6

exploitability 2.0

weighted_severity 0.3

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sjug-t5xz-1bfa

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mupdf@1.10a-r2%3Farch=x86_64&distroversion=v3.7&reponame=main

Package Instance