diff --git a/advisories/github-reviewed/2020/09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json b/advisories/github-reviewed/2020/09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json index 7e755b6bb2ad..ea04bd783d98 100644 --- a/advisories/github-reviewed/2020/09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json +++ b/advisories/github-reviewed/2020/09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-pjh3-jv7w-9jpr", - "modified": "2021-09-23T21:23:47Z", + "modified": "2023-01-09T05:04:00Z", "published": "2020-09-01T15:18:55Z", "aliases": [ "CVE-2015-7982" ], "summary": "Command Injection in gm", - "details": "Versions of `gm` prior to 1.21.1 are affected by a command injection vulnerability. The vulnerability is triggered when user input is passed into `gm.compare()`, which fails to sanitize input correctly before calling the graphics magic binary.\n\n\n## Recommendation\n\nUpdate to version 1.21.1 or later.", + "details": "Versions of `gm` prior to 1.21.0 are affected by a command injection vulnerability. The vulnerability is triggered when user input is passed into `gm.compare()`, which fails to sanitize input correctly before calling the graphics magic binary.\n\n\n## Recommendation\n\nUpdate to version 1.21.0 or later.", "severity": [], "affected": [ { @@ -23,7 +23,7 @@ "introduced": "0" }, { - "fixed": "1.21.1" + "fixed": "1.21.0" } ] }