{"action":"Upgrade openslide to 3.4.1+dfsg-7+deb13u1 or later.","affected":[{"fixed":"3.4.1+dfsg-7+deb13u1","introduced":"0"}],"component":"openslide","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["3.4.1+dfsg-7+deb13u1"],"id":"tcs_01M5NSN1ZF48B9XR2GPPZP8K8V","modified_at":"2026-09-24T08:47:35.873015644Z","published_at":"2026-09-17T21:17:13.323Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-48977","https://security-tracker.debian.org/tracker/CVE-2026-48977"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-48977#Debian:13/openslide","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-48977"}],"summary":"OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile"}