[automatic] Publish 1 advisory for Graphviz_jll

[jlsec-bot]

This action searched 39 packages for advisories that pertain here. It identified 1 advisory as being related to the Julia package(s): Graphviz_jll.

⚠ There are 1 advisories with unbounded vulnerabilities

The publication of unbounded advisories is significantly more impactful and, if at all possible, should be addressed in the packages directly

1 advisories affect artifacts provided by Graphviz_jll

These identifications depend upon accurately tracked artifact metadata in GeneralMetadata.jl. Packages are only listed as affected if they have such tracking, and the vulnerable status (and version numbers themselves) are highly dependent on the accuracy of this metadata. Improvements can be made directly to GeneralMetadata.jl; it is automatically populated on a best-effort basis and manual edits are preserved.

Package and upstream project information

• Graphviz_jll's artifact metadata has upstream: graphviz

  Graphviz_jll metadata for each version:

  Graphviz_jll version	graphviz version
  2.42.3+0	missing
  2.42.3+1	missing
  2.49.3+0	["2.49.3"]
  2.49.3+1	["2.49.3"]
  2.50.0+0	["2.50.0"]
  2.50.0+1	["2.50.0"]

  • The oldest versions with no metadata are not considered when searching for advisories

Advisory summaries

• JLSEC-0000-CVE-2023-46045 (from: CVE-2023-46045) for upstream project(s):
  • graphviz:graphviz at versions: >= 2.36.0, < 10.0.0, mapping to
    • Graphviz_jll at versions: *