[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2019-6978":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":62,"related":67,"reserved_at":9,"published_at":78,"modified_at":79,"state":80,"summary":81,"references_raw":90,"kevs":160,"epss":161,"epss_history":164,"metrics":416,"affected":425},"CVE-2019-6978","The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-415","Double Free","The product calls free() twice on the same memory address.","weakness","Draft","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60],{"_key":25},"ALPINE-CVE-2019-6978",{"_key":27},"RHSA-2019:2722",{"_key":29},"RHSA-2020:3943",{"_key":31},"RHSA-2020:4659",{"_key":33},"SUSE-SU-2019:0333-1",{"_key":35},"SUSE-SU-2019:0747-1",{"_key":37},"SUSE-SU-2019:0771-1",{"_key":39},"SUSE-SU-2019:13961-1",{"_key":41},"SUSE-SU-2022:1560-1",{"_key":43},"SUSE-SU-2022:1516-1",{"_key":45},"OPENSUSE-SU-2019:1148-1",{"_key":47},"OPENSUSE-SU-2024:10777-1",{"_key":49},"DLA-1651-1",{"_key":51},"DSA-4384-1",{"_key":53},"MGASA-2019-0073",{"_key":55},"MGASA-2019-0085",{"_key":57},"UBUNTU-CVE-2019-6978",{"_key":59},"USN-3900-1",{"_key":61},"DEBIAN-CVE-2019-6978",[63,65],{"_key":64},"CVE-2018-15878",{"_key":66},"CVE-2018-15879",[68,69,70,71,72,73,74,75,76,77],{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":53},{"_key":55},"2019-01-28T07:00:00.000Z","2024-08-04T20:38:32.579Z","Modified",{"cisa_kev":82,"cisa_ransomware":82,"cisa_vendor":9,"epss_severity":83,"epss_score":84,"severity":85,"severity_score":86,"severity_version":87,"severity_source":88,"severity_vector":89,"severity_status":80},false,"low",0.02941,"critical",9.8,"v3.0","nvd","CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[91,99,105,111,115,120,124,129,134,138,143,148,152,156],{"url":92,"sources":93,"tags":95},"https://github.com/php/php-src/commit/089f7c0bc28d399b0420aa6ef058e4c1c120b2ae",[94,88],"cve.org",[96,97,98],"X Refsource MISC","Patch","Third Party Advisory",{"url":100,"sources":101,"tags":102},"https://usn.ubuntu.com/3900-1/",[94,88],[103,104,98],"Vendor Advisory","X Refsource UBUNTU",{"url":106,"sources":107,"tags":108},"https://lists.debian.org/debian-lts-announce/2019/01/msg00028.html",[94,88],[109,110,98],"Mailing List","X Refsource MLIST",{"url":112,"sources":113,"tags":114},"https://github.com/libgd/libgd/issues/492",[94,88],[96,97,98],{"url":116,"sources":117,"tags":118},"https://www.debian.org/security/2019/dsa-4384",[94,88],[103,119,98],"X Refsource DEBIAN",{"url":121,"sources":122,"tags":123},"https://github.com/libgd/libgd/commit/553702980ae89c83f2d6e254d62cf82e204956d0",[94,88],[96,97,98],{"url":125,"sources":126,"tags":127},"https://security.gentoo.org/glsa/201903-18",[94,88],[103,128,98],"X Refsource GENTOO",{"url":130,"sources":131,"tags":132},"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00025.html",[94,88],[103,133],"X Refsource SUSE",{"url":135,"sources":136,"tags":137},"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00031.html",[94,88],[103,133],{"url":139,"sources":140,"tags":141},"https://access.redhat.com/errata/RHSA-2019:2722",[94,88],[103,142],"X Refsource REDHAT",{"url":144,"sources":145,"tags":146},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEYUUOW75YD3DENIPYMO263E6NL2NFHI/",[94,88],[103,147],"X Refsource FEDORA",{"url":149,"sources":150,"tags":151},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3WRUPZVT2MWFUEMVGTRAGDOBHLNMGK5R/",[94,88],[103,147],{"url":153,"sources":154,"tags":155},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TTXSLRZI5BCQT3H5KALG3DHUWUMNPDX2/",[94,88],[103,147],{"url":157,"sources":158,"tags":159},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/",[94,88],[103,147],[],{"date":162,"score":84,"percentile":163},"2026-06-04",0.86698,[165,169,172,174,177,180,183,185,188,191,195,198,201,203,205,209,212,215,218,221,224,226,229,231,233,236,239,241,244,247,249,252,255,258,261,264,267,270,273,276,279,282,285,287,290,293,297,300,303,306,309,313,316,318,322,324,327,330,333,336,339,342,344,346,348,350,353,355,358,360,362,365,368,370,373,375,377,380,383,385,388,391,394,397,400,402,404,407,410,413],{"date":166,"score":167,"percentile":168},"2025-11-04",0.03676,0.87392,{"date":170,"score":167,"percentile":171},"2025-11-05",0.87394,{"date":173,"score":167,"percentile":168},"2025-11-06",{"date":175,"score":167,"percentile":176},"2025-11-07",0.87399,{"date":178,"score":167,"percentile":179},"2025-11-08",0.87402,{"date":181,"score":167,"percentile":182},"2025-11-09",0.87396,{"date":184,"score":167,"percentile":182},"2025-11-10",{"date":186,"score":167,"percentile":187},"2025-11-11",0.87401,{"date":189,"score":167,"percentile":190},"2025-11-12",0.87407,{"date":192,"score":193,"percentile":194},"2025-11-13",0.03608,0.87291,{"date":196,"score":193,"percentile":197},"2025-11-14",0.87293,{"date":199,"score":193,"percentile":200},"2025-11-15",0.87288,{"date":202,"score":193,"percentile":197},"2025-11-16",{"date":204,"score":193,"percentile":200},"2025-11-17",{"date":206,"score":207,"percentile":208},"2025-11-18",0.11154,0.92764,{"date":210,"score":207,"percentile":211},"2025-11-19",0.92768,{"date":213,"score":207,"percentile":214},"2025-11-20",0.92772,{"date":216,"score":193,"percentile":217},"2025-11-21",0.87299,{"date":219,"score":193,"percentile":220},"2025-11-22",0.87294,{"date":222,"score":193,"percentile":223},"2025-11-23",0.8729,{"date":225,"score":193,"percentile":194},"2025-11-24",{"date":227,"score":193,"percentile":228},"2025-11-25",0.87292,{"date":230,"score":193,"percentile":223},"2025-11-26",{"date":232,"score":193,"percentile":228},"2025-11-27",{"date":234,"score":193,"percentile":235},"2025-11-28",0.8728,{"date":237,"score":193,"percentile":238},"2025-11-29",0.87352,{"date":240,"score":193,"percentile":238},"2025-11-30",{"date":242,"score":193,"percentile":243},"2025-12-01",0.87416,{"date":245,"score":193,"percentile":246},"2025-12-02",0.87417,{"date":248,"score":193,"percentile":243},"2025-12-03",{"date":250,"score":193,"percentile":251},"2025-12-04",0.8735,{"date":253,"score":193,"percentile":254},"2025-12-05",0.87354,{"date":256,"score":193,"percentile":257},"2025-12-06",0.87351,{"date":259,"score":193,"percentile":260},"2025-12-07",0.87347,{"date":262,"score":193,"percentile":263},"2025-12-08",0.87348,{"date":265,"score":193,"percentile":266},"2025-12-09",0.8736,{"date":268,"score":193,"percentile":269},"2025-12-10",0.87377,{"date":271,"score":193,"percentile":272},"2025-12-11",0.87384,{"date":274,"score":193,"percentile":275},"2025-12-12",0.87388,{"date":277,"score":193,"percentile":278},"2025-12-13",0.87386,{"date":280,"score":193,"percentile":281},"2025-12-14",0.8738,{"date":283,"score":193,"percentile":284},"2025-12-15",0.87378,{"date":286,"score":193,"percentile":278},"2025-12-16",{"date":288,"score":193,"percentile":289},"2025-12-17",0.8739,{"date":291,"score":193,"percentile":292},"2025-12-18",0.874,{"date":294,"score":295,"percentile":296},"2025-12-19",0.03649,0.87483,{"date":298,"score":295,"percentile":299},"2025-12-20",0.87482,{"date":301,"score":295,"percentile":302},"2025-12-21",0.87487,{"date":304,"score":295,"percentile":305},"2025-12-22",0.87488,{"date":307,"score":295,"percentile":308},"2025-12-23",0.87492,{"date":310,"score":311,"percentile":312},"2025-12-24",0.03705,0.87586,{"date":314,"score":311,"percentile":315},"2025-12-25",0.87598,{"date":317,"score":311,"percentile":315},"2025-12-26",{"date":319,"score":320,"percentile":321},"2025-12-27",0.03138,0.86513,{"date":323,"score":311,"percentile":312},"2025-12-28",{"date":325,"score":311,"percentile":326},"2025-12-29",0.8758,{"date":328,"score":311,"percentile":329},"2025-12-30",0.87589,{"date":331,"score":311,"percentile":332},"2025-12-31",0.87601,{"date":334,"score":311,"percentile":335},"2026-01-01",0.87661,{"date":337,"score":311,"percentile":338},"2026-01-02",0.87656,{"date":340,"score":311,"percentile":341},"2026-01-03",0.87655,{"date":343,"score":311,"percentile":329},"2026-01-04",{"date":345,"score":311,"percentile":312},"2026-01-05",{"date":347,"score":193,"percentile":243},"2026-01-06",{"date":349,"score":193,"percentile":243},"2026-01-07",{"date":351,"score":193,"percentile":352},"2026-01-08",0.87421,{"date":354,"score":193,"percentile":352},"2026-01-09",{"date":356,"score":193,"percentile":357},"2026-01-10",0.87422,{"date":359,"score":193,"percentile":246},"2026-01-11",{"date":361,"score":193,"percentile":243},"2026-01-12",{"date":363,"score":193,"percentile":364},"2026-01-13",0.87413,{"date":366,"score":193,"percentile":367},"2026-01-14",0.87426,{"date":369,"score":193,"percentile":367},"2026-01-15",{"date":371,"score":193,"percentile":372},"2026-01-16",0.87432,{"date":374,"score":193,"percentile":372},"2026-01-17",{"date":376,"score":193,"percentile":372},"2026-01-18",{"date":378,"score":193,"percentile":379},"2026-01-19",0.8743,{"date":381,"score":193,"percentile":382},"2026-01-20",0.87429,{"date":384,"score":193,"percentile":372},"2026-01-21",{"date":386,"score":193,"percentile":387},"2026-01-22",0.87437,{"date":389,"score":193,"percentile":390},"2026-01-23",0.8745,{"date":392,"score":193,"percentile":393},"2026-01-24",0.87456,{"date":395,"score":193,"percentile":396},"2026-01-25",0.87453,{"date":398,"score":193,"percentile":399},"2026-01-26",0.87454,{"date":401,"score":193,"percentile":399},"2026-01-27",{"date":403,"score":193,"percentile":393},"2026-01-28",{"date":405,"score":193,"percentile":406},"2026-01-29",0.8746,{"date":408,"score":193,"percentile":409},"2026-01-30",0.87464,{"date":411,"score":193,"percentile":412},"2026-01-31",0.87462,{"date":414,"score":193,"percentile":415},"2026-02-01",0.8753,[417],{"source":88,"cvss_v2_0":418,"cvss_v3_0":423,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":419,"baseSeverity":9,"vectorString":420,"impactScore":421,"exploitabilityScore":422},7.5,"AV:N/AC:L/Au:N/C:P/I:P/A:P",6.4,10,{"baseScore":86,"baseSeverity":424,"vectorString":89,"impactScore":86,"exploitabilityScore":422},"CRITICAL",[426,441,450],{"ecosystem":9,"name":427,"vendor":428,"product":429,"cpe_part":430,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":431},"ubuntu linux","canonical","ubuntu_linux","o",[432,435,437,439],{"version":433,"is_range":82,"range_type":434,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"14.04","cpe",{"version":436,"is_range":82,"range_type":434,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"16.04",{"version":438,"is_range":82,"range_type":434,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"18.04",{"version":440,"is_range":82,"range_type":434,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"18.10",{"ecosystem":9,"name":442,"vendor":443,"product":444,"cpe_part":430,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":445},"debian linux","debian","debian_linux",[446,448],{"version":447,"is_range":82,"range_type":434,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0",{"version":449,"is_range":82,"range_type":434,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0",{"ecosystem":9,"name":451,"vendor":451,"product":451,"cpe_part":452,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":453},"libgd","a",[454],{"version":455,"is_range":82,"range_type":434,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.2.5"]