{"action":"Upgrade php5 to 5.6.33-r0 or later.","affected":[{"fixed":"5.6.33-r0","introduced":"0"}],"component":"php5","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.5","exploited":false,"fixed_versions":["5.6.33-r0"],"id":"tcs_01M5NAWA3CD97B2SSDYHASDY7P","modified_at":"2026-10-23T17:17:55.274728520Z","published_at":"2018-01-16T09:29:00.577Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2018-5711","https://security.alpinelinux.org/vuln/CVE-2018-5711"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2018-5711#Alpine:v3.5/php5","url":"https://osv.dev/vulnerability/ALPINE-CVE-2018-5711"}],"summary":"gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an inf"}