Search for packages
Package details: pkg:nuget/libpng@1.6.35
purl pkg:nuget/libpng@1.6.35
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-pkbe-c1vr-aaaf
Aliases:
CVE-2018-14550
GHSA-qwwr-qc2p-6283
An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.
1.6.37
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T20:02:43.678486+00:00 GHSA Importer Affected by VCID-pkbe-c1vr-aaaf None 36.0.0
2024-09-17T22:46:05.525279+00:00 GitLab Importer Affected by VCID-pkbe-c1vr-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libpng/CVE-2018-14550.yml 34.0.1
2024-09-17T22:07:07.885591+00:00 GHSA Importer Affected by VCID-pkbe-c1vr-aaaf https://github.com/advisories/GHSA-qwwr-qc2p-6283 34.0.1
2024-01-03T18:07:26.084313+00:00 GitLab Importer Affected by VCID-pkbe-c1vr-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libpng/CVE-2018-14550.yml 34.0.0rc1
2024-01-03T17:41:40.771470+00:00 GHSA Importer Affected by VCID-pkbe-c1vr-aaaf https://github.com/advisories/GHSA-qwwr-qc2p-6283 34.0.0rc1