GHSA-g5qh-f5rv-grcp

GHSA-g5qh-f5rv-grcp PUBLISHED CVSS 6.5 MEDIUM

Record from GitHub Advisory Database · Published February 6, 2023

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).

Risk scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Timeline

Feb 6, 2023 CVE Published
Apr 28, 2025 PoC Published
Apr 10, 2026 Security Advisory
May 1, 2026 Distribution Patch

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-g5qh-f5rv-grcp
vulnetix vdb fixes GHSA-g5qh-f5rv-grcp

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-g5qh-f5rv-grcp/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →