CVE-2026-5313

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-5313", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-04-01T12:39:59.987Z", "datePublished": "2026-04-01T21:30:13.458Z", "dateUpdated": "2026-04-03T16:42:46.207Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-01T21:30:13.458Z"}, "title": "Nothings stb GIF Decoder stb_image.h stbi__gif_load_next denial of service", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-404", "lang": "en", "description": "Denial of Service"}]}], "affected": [{"vendor": "Nothings", "product": "stb", "versions": [{"version": "2.0", "status": "affected"}, {"version": "2.1", "status": "affected"}, {"version": "2.2", "status": "affected"}, {"version": "2.3", "status": "affected"}, {"version": "2.4", "status": "affected"}, {"version": "2.5", "status": "affected"}, {"version": "2.6", "status": "affected"}, {"version": "2.7", "status": "affected"}, {"version": "2.8", "status": "affected"}, {"version": "2.9", "status": "affected"}, {"version": "2.10", "status": "affected"}, {"version": "2.11", "status": "affected"}, {"version": "2.12", "status": "affected"}, {"version": "2.13", "status": "affected"}, {"version": "2.14", "status": "affected"}, {"version": "2.15", "status": "affected"}, {"version": "2.16", "status": "affected"}, {"version": "2.17", "status": "affected"}, {"version": "2.18", "status": "affected"}, {"version": "2.19", "status": "affected"}, {"version": "2.20", "status": "affected"}, {"version": "2.21", "status": "affected"}, {"version": "2.22", "status": "affected"}, {"version": "2.23", "status": "affected"}, {"version": "2.24", "status": "affected"}, {"version": "2.25", "status": "affected"}, {"version": "2.26", "status": "affected"}, {"version": "2.27", "status": "affected"}, {"version": "2.28", "status": "affected"}, {"version": "2.29", "status": "affected"}, {"version": "2.30", "status": "affected"}], "modules": ["GIF Decoder"]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in Nothings stb up to 2.30. This issue affects the function stbi__gif_load_next in the library stb_image.h of the component GIF Decoder. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-04-01T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-04-01T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-04-01T14:45:17.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "d0razi (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/354645", "name": "VDB-354645 | Nothings stb GIF Decoder stb_image.h stbi__gif_load_next denial of service", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/354645/cti", "name": "VDB-354645 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/780462", "name": "Submit #780462 | nothings stb \u2264 2.30 (latest) Use After Free", "tags": ["third-party-advisory"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-03T16:42:31.690973Z", "id": "CVE-2026-5313", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-03T16:42:46.207Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-5313", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-03T16:42:31.690973Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-03T16:42:41.439Z"}}], "cna": {"title": "Nothings stb GIF Decoder stb_image.h stbi__gif_load_next denial of service", "credits": [{"lang": "en", "type": "reporter", "value": "d0razi (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"vendor": "Nothings", "modules": ["GIF Decoder"], "product": "stb", "versions": [{"status": "affected", "version": "2.0"}, {"status": "affected", "version": "2.1"}, {"status": "affected", "version": "2.2"}, {"status": "affected", "version": "2.3"}, {"status": "affected", "version": "2.4"}, {"status": "affected", "version": "2.5"}, {"status": "affected", "version": "2.6"}, {"status": "affected", "version": "2.7"}, {"status": "affected", "version": "2.8"}, {"status": "affected", "version": "2.9"}, {"status": "affected", "version": "2.10"}, {"status": "affected", "version": "2.11"}, {"status": "affected", "version": "2.12"}, {"status": "affected", "version": "2.13"}, {"status": "affected", "version": "2.14"}, {"status": "affected", "version": "2.15"}, {"status": "affected", "version": "2.16"}, {"status": "affected", "version": "2.17"}, {"status": "affected", "version": "2.18"}, {"status": "affected", "version": "2.19"}, {"status": "affected", "version": "2.20"}, {"status": "affected", "version": "2.21"}, {"status": "affected", "version": "2.22"}, {"status": "affected", "version": "2.23"}, {"status": "affected", "version": "2.24"}, {"status": "affected", "version": "2.25"}, {"status": "affected", "version": "2.26"}, {"status": "affected", "version": "2.27"}, {"status": "affected", "version": "2.28"}, {"status": "affected", "version": "2.29"}, {"status": "affected", "version": "2.30"}]}], "timeline": [{"lang": "en", "time": "2026-04-01T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-04-01T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-04-01T14:45:17.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/354645", "name": "VDB-354645 | Nothings stb GIF Decoder stb_image.h stbi__gif_load_next denial of service", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/354645/cti", "name": "VDB-354645 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/780462", "name": "Submit #780462 | nothings stb \u2264 2.30 (latest) Use After Free", "tags": ["third-party-advisory"]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in Nothings stb up to 2.30. This issue affects the function stbi__gif_load_next in the library stb_image.h of the component GIF Decoder. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-404", "description": "Denial of Service"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-01T21:30:13.458Z"}}}, "cveMetadata": {"cveId": "CVE-2026-5313", "state": "PUBLISHED", "dateUpdated": "2026-04-03T16:42:46.207Z", "dateReserved": "2026-04-01T12:39:59.987Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-04-01T21:30:13.458Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["GIF Decoder"], "product": "stb", "vendor": "Nothings", "versions": [{"status": "affected", "version": "2.0"}, {"status": "affected", "version": "2.1"}, {"status": "affected", "version": "2.2"}, {"status": "affected", "version": "2.3"}, {"status": "affected", "version": "2.4"}, {"status": "affected", "version": "2.5"}, {"status": "affected", "version": "2.6"}, {"status": "affected", "version": "2.7"}, {"status": "affected", "version": "2.8"}, {"status": "affected", "version": "2.9"}, {"status": "affected", "version": "2.10"}, {"status": "affected", "version": "2.11"}, {"status": "affected", "version": "2.12"}, {"status": "affected", "version": "2.13"}, {"status": "affected", "version": "2.14"}, {"status": "affected", "version": "2.15"}, {"status": "affected", "version": "2.16"}, {"status": "affected", "version": "2.17"}, {"status": "affected", "version": "2.18"}, {"status": "affected", "version": "2.19"}, {"status": "affected", "version": "2.20"}, {"status": "affected", "version": "2.21"}, {"status": "affected", "version": "2.22"}, {"status": "affected", "version": "2.23"}, {"status": "affected", "version": "2.24"}, {"status": "affected", "version": "2.25"}, {"status": "affected", "version": "2.26"}, {"status": "affected", "version": "2.27"}, {"status": "affected", "version": "2.28"}, {"status": "affected", "version": "2.29"}, {"status": "affected", "version": "2.30"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in Nothings stb up to 2.30. This issue affects the function stbi__gif_load_next in the library stb_image.h of the component GIF Decoder. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Una vulnerabilidad ha sido encontrada en Nothings stb hasta la versi\u00f3n 2.30. Este problema afecta a la funci\u00f3n stbi__gif_load_next en la biblioteca stb_image.h del componente Decodificador GIF. Dicha manipulaci\u00f3n conduce a denegaci\u00f3n de servicio. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado al p\u00fablico y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgaci\u00f3n pero no respondi\u00f3 de ninguna manera."}], "id": "CVE-2026-5313", "lastModified": "2026-10-26T22:10:00.163", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-5313", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-03T16:42:31.690973Z", "version": "2.0.3"}}]}, "published": "2026-04-01T22:16:21.553", "references": [{"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/780462"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/354645"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/354645/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-404"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{"bugzilla": {"description": "Nothings stb: Nothings stb: Denial of Service in GIF Decoder via stbi__gif_load_next function", "id": "2454134", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454134"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-1286", "details": ["A flaw was found in Nothings stb. A remote attacker can exploit a vulnerability in the `stbi__gif_load_next` function within the GIF Decoder component of the `stb_image.h` library. This manipulation can lead to a denial of service (DoS), making the affected system or application unavailable. The exploit for this vulnerability has been publicly disclosed."], "mitigation": {"lang": "en:us", "value": "To mitigate this issue, users should avoid processing untrusted GIF images with applications that utilize the `stb_image.h` library. If the `stb` component is not required, consider removing applications that depend on it. For applications that must process GIF content, restrict their exposure to only trusted sources to minimize the risk of a denial of service."}, "name": "CVE-2026-5313", "public_date": "2026-04-01T21:30:13Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-5313\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5313\nhttps://vuldb.com/submit/780462\nhttps://vuldb.com/vuln/354645\nhttps://vuldb.com/vuln/354645/cti"], "statement": "Moderate. This flaw in the `stbi__gif_load_next` function of the `stb_image.h` library, used for GIF decoding, can lead to a denial of service when processing a specially crafted GIF image. Red Hat products that utilize the `stb` component from Community Projects (EPEL) and process untrusted GIF content may be affected. Exploitation requires user interaction, such as opening a malicious GIF file.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.8"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.9"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.10"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.11"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.12"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.13"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.14"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.15"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.16"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.17"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.18"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.19"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.20"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.21"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.22"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.23"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.24"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.25"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.26"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.27"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.28"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.29"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.30"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "stb", "source": "cna", "vendor": "Nothings"}, "product": "stb", "vendor": "nothings"}], "analysis": {"en": {"generated_at": "2026-04-02T13:22:32.534074+00:00", "value": {"mitigation_remediation": ["Upgrade stb_image library to a version later than 2.30 where the fix has been applied.", "If an immediate update is not feasible, disable GIF decoding in your application or switch to a safer image decoder.", "Scan all source locations for hard\u2011coded or downloaded GIF files that could trigger the failure.", "Apply any vendor patches or security advisories as they become available."], "summary": {"action": "Patch Now", "impact": "Denial of Service"}, "threat_synthesis": {"affected_systems": "Any deployment that incorporates Nothings stb version 2.30 or earlier is affected. This includes software that embeds stb_image.h for image loading such as certain game engines, rendering frameworks, and web applications. The vendor product is Nothings:stb; no specific sub\u2011product is listed. The vulnerability applies to all platforms that compile the library with the default GIF decoder.", "description_and_impact": "The vulnerability resides in the stbi__gif_load_next function of the stb_image.h library used by Nothings' stb. It allows an attacker to supply a specially crafted GIF file that causes uncontrolled memory allocation and ultimately crashes the image decoder, resulting in a denial\u2011of\u2011service state. The weakness is identified as CWE\u20111286 and CWE\u2011404. Because the function processes input from external GIF files, the impact arises when a malicious GIF is loaded through the library.", "risk_and_exploitability": "The CVSS score of 5.3 indicates moderate severity. EPSS data is not provided and the vulnerability is not listed in CISA\u2019s KEV catalog, suggesting it is not currently exploited in the wild. However, the attack can be launched remotely via a crafted GIF file and the public exploit is disclosed, so systems that load untrusted GIFs remain at risk. Updating to a fixed version or disabling GIF support mitigates the risk."}}}}, "created": "2026-04-02T07:47:13.278085+00:00", "updated": "2026-04-02T20:22:24.900623+00:00", "vendors": ["nothings", "nothings$PRODUCT$stb"]}