From 97a012c4a7fd405aa99b5a16def0461b366f6561 Mon Sep 17 00:00:00 2001 From: Nikita Pivkin Date: Sat, 19 Sep 2026 18:21:25 +0600 Subject: [PATCH 1/2] Improve GHSA-pjh3-jv7w-9jpr --- .../2020/09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2020/09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json b/advisories/github-reviewed/2020/09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json index 7e755b6bb2ad..7fc798896f7e 100644 --- a/advisories/github-reviewed/2020/09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json +++ b/advisories/github-reviewed/2020/09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-pjh3-jv7w-9jpr", - "modified": "2021-09-23T21:23:47Z", + "modified": "2023-01-09T05:04:00Z", "published": "2020-09-01T15:18:55Z", "aliases": [ "CVE-2015-7982" @@ -23,7 +23,7 @@ "introduced": "0" }, { - "fixed": "1.21.1" + "fixed": "1.21.0" } ] } From 0b8cfbcf4875fa466c9194feea65658711c9339c Mon Sep 17 00:00:00 2001 From: Nikita Pivkin Date: Sat, 19 Sep 2026 18:33:44 +0600 Subject: [PATCH 2/2] Improve GHSA-pjh3-jv7w-9jpr --- .../2020/09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2020/09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json b/advisories/github-reviewed/2020/09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json index 7fc798896f7e..ea04bd783d98 100644 --- a/advisories/github-reviewed/2020/09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json +++ b/advisories/github-reviewed/2020/09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json @@ -7,7 +7,7 @@ "CVE-2015-7982" ], "summary": "Command Injection in gm", - "details": "Versions of `gm` prior to 1.21.1 are affected by a command injection vulnerability. The vulnerability is triggered when user input is passed into `gm.compare()`, which fails to sanitize input correctly before calling the graphics magic binary.\n\n\n## Recommendation\n\nUpdate to version 1.21.1 or later.", + "details": "Versions of `gm` prior to 1.21.0 are affected by a command injection vulnerability. The vulnerability is triggered when user input is passed into `gm.compare()`, which fails to sanitize input correctly before calling the graphics magic binary.\n\n\n## Recommendation\n\nUpdate to version 1.21.0 or later.", "severity": [], "affected": [ {