{"action":"Upgrade gd to 2.3.0-r0 or later.","affected":[{"fixed":"2.3.0-r0","introduced":"0"}],"component":"gd","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.19","exploited":false,"fixed_versions":["2.3.0-r0"],"id":"tcs_01M5NB5A8BAG7SWTVJBS73HSNB","modified_at":"2026-09-21T06:17:52.453577301Z","published_at":"2019-06-19T00:15:12.360Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2019-11038","https://security.alpinelinux.org/vuln/CVE-2019-11038"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2019-11038#Alpine:v3.19/gd","url":"https://osv.dev/vulnerability/ALPINE-CVE-2019-11038"}],"summary":"When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3."}