Publish GHSA-98cp-rj9f-6v5g

advisory-database[bot] · advisory-database[bot] · commit 3c70e894112b · 2026-04-16T15:18:26.000Z
diff --git a/advisories/github-reviewed/2026/04/GHSA-98cp-rj9f-6v5g/GHSA-98cp-rj9f-6v5g.json b/advisories/github-reviewed/2026/04/GHSA-98cp-rj9f-6v5g/GHSA-98cp-rj9f-6v5g.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-98cp-rj9f-6v5g",
-  "modified": "2026-04-14T23:31:52Z",
+  "modified": "2026-04-16T15:16:07Z",
   "published": "2026-04-14T23:31:52Z",
   "aliases": [],
   "summary": "ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete",
@@ -26,7 +26,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -45,7 +45,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -64,7 +64,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -83,7 +83,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -102,7 +102,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -121,7 +121,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -140,7 +140,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -159,7 +159,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -178,7 +178,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -197,7 +197,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -216,7 +216,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -235,7 +235,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -254,7 +254,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -273,7 +273,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -292,7 +292,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -311,7 +311,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -330,7 +330,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }
@@ -349,7 +349,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "14.20.0"
+              "fixed": "14.12.0"
             }
           ]
         }

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"schema_version": "1.4.0",`
`3`	`3`	`"id": "GHSA-98cp-rj9f-6v5g",`
`4`		`- "modified": "2026-04-14T23:31:52Z",`
	`4`	`+ "modified": "2026-04-16T15:16:07Z",`
`5`	`5`	`"published": "2026-04-14T23:31:52Z",`
`6`	`6`	`"aliases": [],`
`7`	`7`	`"summary": "ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete",`
`@@ -26,7 +26,7 @@`
`26`	`26`	`"introduced": "0"`
`27`	`27`	`},`
`28`	`28`	`{`
`29`		`- "fixed": "14.20.0"`
	`29`	`+ "fixed": "14.12.0"`
`30`	`30`	`}`
`31`	`31`	`]`
`32`	`32`	`}`
`@@ -45,7 +45,7 @@`
`45`	`45`	`"introduced": "0"`
`46`	`46`	`},`
`47`	`47`	`{`
`48`		`- "fixed": "14.20.0"`
	`48`	`+ "fixed": "14.12.0"`
`49`	`49`	`}`
`50`	`50`	`]`
`51`	`51`	`}`
`@@ -64,7 +64,7 @@`
`64`	`64`	`"introduced": "0"`
`65`	`65`	`},`
`66`	`66`	`{`
`67`		`- "fixed": "14.20.0"`
	`67`	`+ "fixed": "14.12.0"`
`68`	`68`	`}`
`69`	`69`	`]`
`70`	`70`	`}`
`@@ -83,7 +83,7 @@`
`83`	`83`	`"introduced": "0"`
`84`	`84`	`},`
`85`	`85`	`{`
`86`		`- "fixed": "14.20.0"`
	`86`	`+ "fixed": "14.12.0"`
`87`	`87`	`}`
`88`	`88`	`]`
`89`	`89`	`}`
`@@ -102,7 +102,7 @@`
`102`	`102`	`"introduced": "0"`
`103`	`103`	`},`
`104`	`104`	`{`
`105`		`- "fixed": "14.20.0"`
	`105`	`+ "fixed": "14.12.0"`
`106`	`106`	`}`
`107`	`107`	`]`
`108`	`108`	`}`
`@@ -121,7 +121,7 @@`
`121`	`121`	`"introduced": "0"`
`122`	`122`	`},`
`123`	`123`	`{`
`124`		`- "fixed": "14.20.0"`
	`124`	`+ "fixed": "14.12.0"`
`125`	`125`	`}`
`126`	`126`	`]`
`127`	`127`	`}`
`@@ -140,7 +140,7 @@`
`140`	`140`	`"introduced": "0"`
`141`	`141`	`},`
`142`	`142`	`{`
`143`		`- "fixed": "14.20.0"`
	`143`	`+ "fixed": "14.12.0"`
`144`	`144`	`}`
`145`	`145`	`]`
`146`	`146`	`}`
`@@ -159,7 +159,7 @@`
`159`	`159`	`"introduced": "0"`
`160`	`160`	`},`
`161`	`161`	`{`
`162`		`- "fixed": "14.20.0"`
	`162`	`+ "fixed": "14.12.0"`
`163`	`163`	`}`
`164`	`164`	`]`
`165`	`165`	`}`
`@@ -178,7 +178,7 @@`
`178`	`178`	`"introduced": "0"`
`179`	`179`	`},`
`180`	`180`	`{`
`181`		`- "fixed": "14.20.0"`
	`181`	`+ "fixed": "14.12.0"`
`182`	`182`	`}`
`183`	`183`	`]`
`184`	`184`	`}`
`@@ -197,7 +197,7 @@`
`197`	`197`	`"introduced": "0"`
`198`	`198`	`},`
`199`	`199`	`{`
`200`		`- "fixed": "14.20.0"`
	`200`	`+ "fixed": "14.12.0"`
`201`	`201`	`}`
`202`	`202`	`]`
`203`	`203`	`}`
`@@ -216,7 +216,7 @@`
`216`	`216`	`"introduced": "0"`
`217`	`217`	`},`
`218`	`218`	`{`
`219`		`- "fixed": "14.20.0"`
	`219`	`+ "fixed": "14.12.0"`
`220`	`220`	`}`
`221`	`221`	`]`
`222`	`222`	`}`
`@@ -235,7 +235,7 @@`
`235`	`235`	`"introduced": "0"`
`236`	`236`	`},`
`237`	`237`	`{`
`238`		`- "fixed": "14.20.0"`
	`238`	`+ "fixed": "14.12.0"`
`239`	`239`	`}`
`240`	`240`	`]`
`241`	`241`	`}`
`@@ -254,7 +254,7 @@`
`254`	`254`	`"introduced": "0"`
`255`	`255`	`},`
`256`	`256`	`{`
`257`		`- "fixed": "14.20.0"`
	`257`	`+ "fixed": "14.12.0"`
`258`	`258`	`}`
`259`	`259`	`]`
`260`	`260`	`}`
`@@ -273,7 +273,7 @@`
`273`	`273`	`"introduced": "0"`
`274`	`274`	`},`
`275`	`275`	`{`
`276`		`- "fixed": "14.20.0"`
	`276`	`+ "fixed": "14.12.0"`
`277`	`277`	`}`
`278`	`278`	`]`
`279`	`279`	`}`
`@@ -292,7 +292,7 @@`
`292`	`292`	`"introduced": "0"`
`293`	`293`	`},`
`294`	`294`	`{`
`295`		`- "fixed": "14.20.0"`
	`295`	`+ "fixed": "14.12.0"`
`296`	`296`	`}`
`297`	`297`	`]`
`298`	`298`	`}`
`@@ -311,7 +311,7 @@`
`311`	`311`	`"introduced": "0"`
`312`	`312`	`},`
`313`	`313`	`{`
`314`		`- "fixed": "14.20.0"`
	`314`	`+ "fixed": "14.12.0"`
`315`	`315`	`}`
`316`	`316`	`]`
`317`	`317`	`}`
`@@ -330,7 +330,7 @@`
`330`	`330`	`"introduced": "0"`
`331`	`331`	`},`
`332`	`332`	`{`
`333`		`- "fixed": "14.20.0"`
	`333`	`+ "fixed": "14.12.0"`
`334`	`334`	`}`
`335`	`335`	`]`
`336`	`336`	`}`
`@@ -349,7 +349,7 @@`
`349`	`349`	`"introduced": "0"`
`350`	`350`	`},`
`351`	`351`	`{`
`352`		`- "fixed": "14.20.0"`
	`352`	`+ "fixed": "14.12.0"`
`353`	`353`	`}`
`354`	`354`	`]`
`355`	`355`	`}`