Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:apk/alpine/optipng@0.7.8-r0?arch=ppc64le&distroversion=edge&reponame=community

Type apk

Namespace alpine

Name optipng

Version 0.7.8-r0

Qualifiers

arch	ppc64le
distroversion	edge
reponame	community

Subpath

Is_vulnerable false

Next_non_vulnerable_version null

Latest_non_vulnerable_version null

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-x7jg-hfc6-hubk

vulnerability_id VCID-x7jg-hfc6-hubk

summary optipng: global buffer overflow via the 'buffer' variable at gifread.c.

references

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-43907.json

reference_id

reference_type

scores

value	6.6
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-43907.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2023-43907

reference_id

reference_type

scores

value	0.00025
scoring_system	epss
scoring_elements	0.07541
published_at	2026-06-09T12:55:00Z

value	0.00025
scoring_system	epss
scoring_elements	0.07591
published_at	2026-06-05T12:55:00Z

value	0.00025
scoring_system	epss
scoring_elements	0.07601
published_at	2026-06-06T12:55:00Z

value	0.00025
scoring_system	epss
scoring_elements	0.07579
published_at	2026-06-07T12:55:00Z

value	0.00025
scoring_system	epss
scoring_elements	0.07531
published_at	2026-06-08T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2023-43907

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43907
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43907

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055668
reference_id	1055668
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055668

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=2242138
reference_id	2242138
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=2242138

reference_url

https://sourceforge.net/projects/optipng/files/OptiPNG/optipng-0.7.7/optipng-0.7.7.tar.gz/download?use_mirror=udomain&download=

reference_id

download?use_mirror=udomain&download=

reference_type

scores

value	7.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	Track*
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-09-23T16:42:08Z/

url

https://sourceforge.net/projects/optipng/files/OptiPNG/optipng-0.7.7/optipng-0.7.7.tar.gz/download?use_mirror=udomain&download=

reference_url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBHVG5LDE2K3FZSIK4XFXOUXSE7NZ5JH/

reference_id

IBHVG5LDE2K3FZSIK4XFXOUXSE7NZ5JH

reference_type

scores

value	7.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	Track*
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-09-23T16:42:08Z/

url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBHVG5LDE2K3FZSIK4XFXOUXSE7NZ5JH/

reference_url

https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/optipng-global-buffer-overflow1/optipng-global-buffer-overflow1.md

reference_id

optipng-global-buffer-overflow1.md

reference_type

scores

value	7.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	Track*
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-09-23T16:42:08Z/

url

https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/optipng-global-buffer-overflow1/optipng-global-buffer-overflow1.md

reference_url

http://optipng.sourceforge.net/

reference_id

optipng.sourceforge.net

reference_type

scores

value	7.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	Track*
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-09-23T16:42:08Z/

url

http://optipng.sourceforge.net/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RCG5CMDT37WCZGAWQNOIPVP4VHGCPUU3/

reference_id

RCG5CMDT37WCZGAWQNOIPVP4VHGCPUU3

reference_type

scores

value	7.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	Track*
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-09-23T16:42:08Z/

url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RCG5CMDT37WCZGAWQNOIPVP4VHGCPUU3/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAB22JXDE7O27DYARZXC7PFUETM5OOT5/

reference_id

VAB22JXDE7O27DYARZXC7PFUETM5OOT5

reference_type

scores

value	7.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	Track*
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-09-23T16:42:08Z/

url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAB22JXDE7O27DYARZXC7PFUETM5OOT5/

fixed_packages

url	pkg:apk/alpine/optipng@0.7.8-r0?arch=ppc64le&distroversion=edge&reponame=community
purl	pkg:apk/alpine/optipng@0.7.8-r0?arch=ppc64le&distroversion=edge&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/optipng@0.7.8-r0%3Farch=ppc64le&distroversion=edge&reponame=community

aliases CVE-2023-43907

risk_score 3.5

exploitability 0.5

weighted_severity 7.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x7jg-hfc6-hubk

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/optipng@0.7.8-r0%3Farch=ppc64le&distroversion=edge&reponame=community

Package Instance