Critical severityNVD Advisory· Published Sep 1, 2020· Updated Sep 23, 2021
Command Injection in gm
CVE-2015-7982
Description
Versions of gm prior to 1.21.1 are affected by a command injection vulnerability. The vulnerability is triggered when user input is passed into gm.compare(), which fails to sanitize input correctly before calling the graphics magic binary.
Recommendation
Update to version 1.21.1 or later.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
gmnpm | < 1.21.1 | 1.21.1 |
Patches
15f5c77490aa8https://github.com/aheckmann/gmvia ghsa
Vulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
4News mentions
0No linked articles in our index yet.