Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/gimp@3.2.0~RC3-1?distro=trixie
Typedeb
Namespacedebian
Namegimp
Version3.2.0~RC3-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version3.2.0-1
Latest_non_vulnerable_version3.2.4-2
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-eq2x-qk7x-afhg
vulnerability_id VCID-eq2x-qk7x-afhg
summary gimp: GIMP: Remote Code Execution via ICO File Parsing Vulnerability
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-0797.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-0797.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-0797
reference_id
reference_type
scores
0
value 0.00043
scoring_system epss
scoring_elements 0.13283
published_at 2026-06-09T12:55:00Z
1
value 0.00043
scoring_system epss
scoring_elements 0.13367
published_at 2026-06-05T12:55:00Z
2
value 0.00043
scoring_system epss
scoring_elements 0.13372
published_at 2026-06-06T12:55:00Z
3
value 0.00043
scoring_system epss
scoring_elements 0.1333
published_at 2026-06-07T12:55:00Z
4
value 0.00043
scoring_system epss
scoring_elements 0.13251
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-0797
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0797
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0797
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128601
reference_id 1128601
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128601
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2441524
reference_id 2441524
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2441524
6
reference_url https://gitlab.gnome.org/GNOME/gimp/-/commit/69cc6b1a6645dc9c4d7b484483dbe6a84b922b9c
reference_id 69cc6b1a6645dc9c4d7b484483dbe6a84b922b9c
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-25T04:55:45Z/
url https://gitlab.gnome.org/GNOME/gimp/-/commit/69cc6b1a6645dc9c4d7b484483dbe6a84b922b9c
7
reference_url https://access.redhat.com/errata/RHSA-2026:4173
reference_id RHSA-2026:4173
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:4173
8
reference_url https://access.redhat.com/errata/RHSA-2026:5113
reference_id RHSA-2026:5113
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5113
9
reference_url https://access.redhat.com/errata/RHSA-2026:5388
reference_id RHSA-2026:5388
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5388
10
reference_url https://access.redhat.com/errata/RHSA-2026:5389
reference_id RHSA-2026:5389
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5389
11
reference_url https://access.redhat.com/errata/RHSA-2026:5390
reference_id RHSA-2026:5390
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5390
12
reference_url https://access.redhat.com/errata/RHSA-2026:5391
reference_id RHSA-2026:5391
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5391
13
reference_url https://access.redhat.com/errata/RHSA-2026:5434
reference_id RHSA-2026:5434
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5434
14
reference_url https://access.redhat.com/errata/RHSA-2026:5435
reference_id RHSA-2026:5435
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5435
15
reference_url https://access.redhat.com/errata/RHSA-2026:5436
reference_id RHSA-2026:5436
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5436
16
reference_url https://access.redhat.com/errata/RHSA-2026:5437
reference_id RHSA-2026:5437
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5437
17
reference_url https://www.zerodayinitiative.com/advisories/ZDI-26-050/
reference_id ZDI-26-050
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-25T04:55:45Z/
url https://www.zerodayinitiative.com/advisories/ZDI-26-050/
fixed_packages
0
url pkg:deb/debian/gimp@2.10.22-4%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/gimp@2.10.22-4%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4t6y-xyhd-cyau
1
vulnerability VCID-bhng-9wue-tfew
2
vulnerability VCID-daex-4p6v-kkfa
3
vulnerability VCID-v61r-63c3-z3bu
4
vulnerability VCID-vc97-wac9-1fc7
5
vulnerability VCID-wb9g-gzb7-u3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@2.10.22-4%252Bdeb11u2%3Fdistro=trixie
1
url pkg:deb/debian/gimp@2.10.22-4%2Bdeb11u7?distro=trixie
purl pkg:deb/debian/gimp@2.10.22-4%2Bdeb11u7?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@2.10.22-4%252Bdeb11u7%3Fdistro=trixie
2
url pkg:deb/debian/gimp@2.10.34-1%2Bdeb12u9?distro=trixie
purl pkg:deb/debian/gimp@2.10.34-1%2Bdeb12u9?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@2.10.34-1%252Bdeb12u9%3Fdistro=trixie
3
url pkg:deb/debian/gimp@2.10.34-1%2Bdeb12u10?distro=trixie
purl pkg:deb/debian/gimp@2.10.34-1%2Bdeb12u10?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4t6y-xyhd-cyau
1
vulnerability VCID-bhng-9wue-tfew
2
vulnerability VCID-daex-4p6v-kkfa
3
vulnerability VCID-v61r-63c3-z3bu
4
vulnerability VCID-vc97-wac9-1fc7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@2.10.34-1%252Bdeb12u10%3Fdistro=trixie
4
url pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u7?distro=trixie
purl pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u7?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.0.4-3%252Bdeb13u7%3Fdistro=trixie
5
url pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u8?distro=trixie
purl pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u8?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4t6y-xyhd-cyau
1
vulnerability VCID-bhng-9wue-tfew
2
vulnerability VCID-v61r-63c3-z3bu
3
vulnerability VCID-vc97-wac9-1fc7
4
vulnerability VCID-vrzz-ktuz-uycr
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.0.4-3%252Bdeb13u8%3Fdistro=trixie
6
url pkg:deb/debian/gimp@3.2.0~RC3-1?distro=trixie
purl pkg:deb/debian/gimp@3.2.0~RC3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.2.0~RC3-1%3Fdistro=trixie
7
url pkg:deb/debian/gimp@3.2.4-2?distro=trixie
purl pkg:deb/debian/gimp@3.2.4-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.2.4-2%3Fdistro=trixie
aliases CVE-2026-0797
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eq2x-qk7x-afhg
1
url VCID-k7g5-beq1-b7b9
vulnerability_id VCID-k7g5-beq1-b7b9
summary gimp: GIMP: Remote code execution via heap-based buffer overflow in ICNS file parsing
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-2047.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-2047.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-2047
reference_id
reference_type
scores
0
value 0.00041
scoring_system epss
scoring_elements 0.12741
published_at 2026-06-09T12:55:00Z
1
value 0.00041
scoring_system epss
scoring_elements 0.12831
published_at 2026-06-05T12:55:00Z
2
value 0.00041
scoring_system epss
scoring_elements 0.12836
published_at 2026-06-06T12:55:00Z
3
value 0.00041
scoring_system epss
scoring_elements 0.12796
published_at 2026-06-07T12:55:00Z
4
value 0.00041
scoring_system epss
scoring_elements 0.12712
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-2047
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128605
reference_id 1128605
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128605
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2441517
reference_id 2441517
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2441517
5
reference_url https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2600/diffs?commit_id=dd2faac351f1ff2588529fedc606e6a5f815577c
reference_id diffs?commit_id=dd2faac351f1ff2588529fedc606e6a5f815577c
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-21T04:56:38Z/
url https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2600/diffs?commit_id=dd2faac351f1ff2588529fedc606e6a5f815577c
6
reference_url https://access.redhat.com/errata/RHSA-2026:4173
reference_id RHSA-2026:4173
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:4173
7
reference_url https://www.zerodayinitiative.com/advisories/ZDI-26-120/
reference_id ZDI-26-120
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-21T04:56:38Z/
url https://www.zerodayinitiative.com/advisories/ZDI-26-120/
fixed_packages
0
url pkg:deb/debian/gimp@0?distro=trixie
purl pkg:deb/debian/gimp@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@0%3Fdistro=trixie
1
url pkg:deb/debian/gimp@2.10.22-4%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/gimp@2.10.22-4%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4t6y-xyhd-cyau
1
vulnerability VCID-bhng-9wue-tfew
2
vulnerability VCID-daex-4p6v-kkfa
3
vulnerability VCID-v61r-63c3-z3bu
4
vulnerability VCID-vc97-wac9-1fc7
5
vulnerability VCID-wb9g-gzb7-u3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@2.10.22-4%252Bdeb11u2%3Fdistro=trixie
2
url pkg:deb/debian/gimp@2.10.34-1%2Bdeb12u10?distro=trixie
purl pkg:deb/debian/gimp@2.10.34-1%2Bdeb12u10?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4t6y-xyhd-cyau
1
vulnerability VCID-bhng-9wue-tfew
2
vulnerability VCID-daex-4p6v-kkfa
3
vulnerability VCID-v61r-63c3-z3bu
4
vulnerability VCID-vc97-wac9-1fc7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@2.10.34-1%252Bdeb12u10%3Fdistro=trixie
3
url pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u7?distro=trixie
purl pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u7?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.0.4-3%252Bdeb13u7%3Fdistro=trixie
4
url pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u8?distro=trixie
purl pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u8?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4t6y-xyhd-cyau
1
vulnerability VCID-bhng-9wue-tfew
2
vulnerability VCID-v61r-63c3-z3bu
3
vulnerability VCID-vc97-wac9-1fc7
4
vulnerability VCID-vrzz-ktuz-uycr
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.0.4-3%252Bdeb13u8%3Fdistro=trixie
5
url pkg:deb/debian/gimp@3.2.0~RC3-1?distro=trixie
purl pkg:deb/debian/gimp@3.2.0~RC3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.2.0~RC3-1%3Fdistro=trixie
6
url pkg:deb/debian/gimp@3.2.4-2?distro=trixie
purl pkg:deb/debian/gimp@3.2.4-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.2.4-2%3Fdistro=trixie
aliases CVE-2026-2047
risk_score 3.5
exploitability 0.5
weighted_severity 7.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k7g5-beq1-b7b9
2
url VCID-mtne-hwdy-6yd5
vulnerability_id VCID-mtne-hwdy-6yd5
summary gimp: GIMP: Remote Code Execution via XWD file parsing vulnerability
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-2048.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-2048.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-2048
reference_id
reference_type
scores
0
value 0.00054
scoring_system epss
scoring_elements 0.17282
published_at 2026-06-09T12:55:00Z
1
value 0.00054
scoring_system epss
scoring_elements 0.17385
published_at 2026-06-05T12:55:00Z
2
value 0.00054
scoring_system epss
scoring_elements 0.17381
published_at 2026-06-06T12:55:00Z
3
value 0.00054
scoring_system epss
scoring_elements 0.17344
published_at 2026-06-07T12:55:00Z
4
value 0.00054
scoring_system epss
scoring_elements 0.17265
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-2048
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2048
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2048
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128606
reference_id 1128606
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128606
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2441527
reference_id 2441527
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2441527
6
reference_url https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2586/diffs?commit_id=57712677007793118388c5be6fb8231f22a2b341
reference_id diffs?commit_id=57712677007793118388c5be6fb8231f22a2b341
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-21T04:56:37Z/
url https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2586/diffs?commit_id=57712677007793118388c5be6fb8231f22a2b341
7
reference_url https://access.redhat.com/errata/RHSA-2026:4173
reference_id RHSA-2026:4173
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:4173
8
reference_url https://access.redhat.com/errata/RHSA-2026:5113
reference_id RHSA-2026:5113
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5113
9
reference_url https://access.redhat.com/errata/RHSA-2026:5388
reference_id RHSA-2026:5388
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5388
10
reference_url https://access.redhat.com/errata/RHSA-2026:5389
reference_id RHSA-2026:5389
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5389
11
reference_url https://access.redhat.com/errata/RHSA-2026:5390
reference_id RHSA-2026:5390
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5390
12
reference_url https://access.redhat.com/errata/RHSA-2026:5391
reference_id RHSA-2026:5391
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5391
13
reference_url https://access.redhat.com/errata/RHSA-2026:5434
reference_id RHSA-2026:5434
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5434
14
reference_url https://access.redhat.com/errata/RHSA-2026:5435
reference_id RHSA-2026:5435
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5435
15
reference_url https://access.redhat.com/errata/RHSA-2026:5436
reference_id RHSA-2026:5436
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5436
16
reference_url https://access.redhat.com/errata/RHSA-2026:5437
reference_id RHSA-2026:5437
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5437
17
reference_url https://www.zerodayinitiative.com/advisories/ZDI-26-121/
reference_id ZDI-26-121
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-21T04:56:37Z/
url https://www.zerodayinitiative.com/advisories/ZDI-26-121/
fixed_packages
0
url pkg:deb/debian/gimp@2.10.22-4%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/gimp@2.10.22-4%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4t6y-xyhd-cyau
1
vulnerability VCID-bhng-9wue-tfew
2
vulnerability VCID-daex-4p6v-kkfa
3
vulnerability VCID-v61r-63c3-z3bu
4
vulnerability VCID-vc97-wac9-1fc7
5
vulnerability VCID-wb9g-gzb7-u3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@2.10.22-4%252Bdeb11u2%3Fdistro=trixie
1
url pkg:deb/debian/gimp@2.10.22-4%2Bdeb11u7?distro=trixie
purl pkg:deb/debian/gimp@2.10.22-4%2Bdeb11u7?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@2.10.22-4%252Bdeb11u7%3Fdistro=trixie
2
url pkg:deb/debian/gimp@2.10.34-1%2Bdeb12u9?distro=trixie
purl pkg:deb/debian/gimp@2.10.34-1%2Bdeb12u9?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@2.10.34-1%252Bdeb12u9%3Fdistro=trixie
3
url pkg:deb/debian/gimp@2.10.34-1%2Bdeb12u10?distro=trixie
purl pkg:deb/debian/gimp@2.10.34-1%2Bdeb12u10?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4t6y-xyhd-cyau
1
vulnerability VCID-bhng-9wue-tfew
2
vulnerability VCID-daex-4p6v-kkfa
3
vulnerability VCID-v61r-63c3-z3bu
4
vulnerability VCID-vc97-wac9-1fc7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@2.10.34-1%252Bdeb12u10%3Fdistro=trixie
4
url pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u7?distro=trixie
purl pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u7?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.0.4-3%252Bdeb13u7%3Fdistro=trixie
5
url pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u8?distro=trixie
purl pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u8?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4t6y-xyhd-cyau
1
vulnerability VCID-bhng-9wue-tfew
2
vulnerability VCID-v61r-63c3-z3bu
3
vulnerability VCID-vc97-wac9-1fc7
4
vulnerability VCID-vrzz-ktuz-uycr
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.0.4-3%252Bdeb13u8%3Fdistro=trixie
6
url pkg:deb/debian/gimp@3.2.0~RC3-1?distro=trixie
purl pkg:deb/debian/gimp@3.2.0~RC3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.2.0~RC3-1%3Fdistro=trixie
7
url pkg:deb/debian/gimp@3.2.4-2?distro=trixie
purl pkg:deb/debian/gimp@3.2.4-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.2.4-2%3Fdistro=trixie
aliases CVE-2026-2048
risk_score 3.5
exploitability 0.5
weighted_severity 7.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mtne-hwdy-6yd5
3
url VCID-uc7r-cwgz-pbgu
vulnerability_id VCID-uc7r-cwgz-pbgu
summary gimp: GIMP: Remote Code Execution via out-of-bounds write in XWD file parsing
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-2045.json
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-2045.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-2045
reference_id
reference_type
scores
0
value 0.00056
scoring_system epss
scoring_elements 0.17835
published_at 2026-06-09T12:55:00Z
1
value 0.00056
scoring_system epss
scoring_elements 0.17932
published_at 2026-06-05T12:55:00Z
2
value 0.00056
scoring_system epss
scoring_elements 0.17928
published_at 2026-06-06T12:55:00Z
3
value 0.00056
scoring_system epss
scoring_elements 0.17892
published_at 2026-06-07T12:55:00Z
4
value 0.00056
scoring_system epss
scoring_elements 0.17817
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-2045
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2045
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2045
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128604
reference_id 1128604
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128604
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2441522
reference_id 2441522
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2441522
6
reference_url https://gitlab.gnome.org/GNOME/gimp/-/commit/68b27dfb1cbd9b3f22d7fa624dbab8647ee5f275
reference_id 68b27dfb1cbd9b3f22d7fa624dbab8647ee5f275
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-21T04:56:40Z/
url https://gitlab.gnome.org/GNOME/gimp/-/commit/68b27dfb1cbd9b3f22d7fa624dbab8647ee5f275
7
reference_url https://access.redhat.com/errata/RHSA-2026:4173
reference_id RHSA-2026:4173
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:4173
8
reference_url https://access.redhat.com/errata/RHSA-2026:5113
reference_id RHSA-2026:5113
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5113
9
reference_url https://access.redhat.com/errata/RHSA-2026:5388
reference_id RHSA-2026:5388
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5388
10
reference_url https://access.redhat.com/errata/RHSA-2026:5389
reference_id RHSA-2026:5389
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5389
11
reference_url https://access.redhat.com/errata/RHSA-2026:5390
reference_id RHSA-2026:5390
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5390
12
reference_url https://access.redhat.com/errata/RHSA-2026:5391
reference_id RHSA-2026:5391
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5391
13
reference_url https://access.redhat.com/errata/RHSA-2026:5434
reference_id RHSA-2026:5434
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5434
14
reference_url https://access.redhat.com/errata/RHSA-2026:5435
reference_id RHSA-2026:5435
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5435
15
reference_url https://access.redhat.com/errata/RHSA-2026:5436
reference_id RHSA-2026:5436
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5436
16
reference_url https://access.redhat.com/errata/RHSA-2026:5437
reference_id RHSA-2026:5437
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5437
17
reference_url https://www.zerodayinitiative.com/advisories/ZDI-26-119/
reference_id ZDI-26-119
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-21T04:56:40Z/
url https://www.zerodayinitiative.com/advisories/ZDI-26-119/
fixed_packages
0
url pkg:deb/debian/gimp@2.10.22-4%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/gimp@2.10.22-4%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4t6y-xyhd-cyau
1
vulnerability VCID-bhng-9wue-tfew
2
vulnerability VCID-daex-4p6v-kkfa
3
vulnerability VCID-v61r-63c3-z3bu
4
vulnerability VCID-vc97-wac9-1fc7
5
vulnerability VCID-wb9g-gzb7-u3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@2.10.22-4%252Bdeb11u2%3Fdistro=trixie
1
url pkg:deb/debian/gimp@2.10.22-4%2Bdeb11u7?distro=trixie
purl pkg:deb/debian/gimp@2.10.22-4%2Bdeb11u7?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@2.10.22-4%252Bdeb11u7%3Fdistro=trixie
2
url pkg:deb/debian/gimp@2.10.34-1%2Bdeb12u9?distro=trixie
purl pkg:deb/debian/gimp@2.10.34-1%2Bdeb12u9?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@2.10.34-1%252Bdeb12u9%3Fdistro=trixie
3
url pkg:deb/debian/gimp@2.10.34-1%2Bdeb12u10?distro=trixie
purl pkg:deb/debian/gimp@2.10.34-1%2Bdeb12u10?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4t6y-xyhd-cyau
1
vulnerability VCID-bhng-9wue-tfew
2
vulnerability VCID-daex-4p6v-kkfa
3
vulnerability VCID-v61r-63c3-z3bu
4
vulnerability VCID-vc97-wac9-1fc7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@2.10.34-1%252Bdeb12u10%3Fdistro=trixie
4
url pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u7?distro=trixie
purl pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u7?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.0.4-3%252Bdeb13u7%3Fdistro=trixie
5
url pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u8?distro=trixie
purl pkg:deb/debian/gimp@3.0.4-3%2Bdeb13u8?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4t6y-xyhd-cyau
1
vulnerability VCID-bhng-9wue-tfew
2
vulnerability VCID-v61r-63c3-z3bu
3
vulnerability VCID-vc97-wac9-1fc7
4
vulnerability VCID-vrzz-ktuz-uycr
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.0.4-3%252Bdeb13u8%3Fdistro=trixie
6
url pkg:deb/debian/gimp@3.2.0~RC3-1?distro=trixie
purl pkg:deb/debian/gimp@3.2.0~RC3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.2.0~RC3-1%3Fdistro=trixie
7
url pkg:deb/debian/gimp@3.2.4-2?distro=trixie
purl pkg:deb/debian/gimp@3.2.4-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.2.4-2%3Fdistro=trixie
aliases CVE-2026-2045
risk_score 3.3
exploitability 0.5
weighted_severity 6.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uc7r-cwgz-pbgu
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/gimp@3.2.0~RC3-1%3Fdistro=trixie