Search for packages
Package details: pkg:deb/debian/graphviz@2.42.2-7%2Bdeb12u1
purl pkg:deb/debian/graphviz@2.42.2-7%2Bdeb12u1
Next non-vulnerable version 2.42.4-3
Latest non-vulnerable version 2.42.4-3
Risk 3.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-2hc6-pk7m-aaag
Aliases:
CVE-2023-46045
Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.
2.42.2-8
Affected by 0 other vulnerabilities.
2.42.2-9
Affected by 0 other vulnerabilities.
2.42.4-2
Affected by 0 other vulnerabilities.
2.42.4-3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T23:03:29.180036+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-04-04T01:43:18.046190+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-02-21T14:21:13.156906+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 35.1.0
2024-11-24T03:27:45.772910+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 35.0.0
2024-10-11T00:51:50.867949+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 34.0.2
2024-09-20T05:22:17.775364+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 34.0.1