Approved changes feed: RSS · Atom

cpe:2.3:a:gerbv_project:gerbv:2.7.1:forked_dev:*:*:*:*:*:*

part: a version: 2.7.1 update: forked_dev

VendorGerbv Project (515eb3fe-4f33-5399-b1ec-91bc09df2000)
ProductGerbv (d5dc9980-a3bb-5499-9867-c1cfcef87494)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gerbv purl2cpe 2026-06-01 10:17:27.691843
pkg:deb/ubuntu/gerbv purl2cpe 2026-06-01 10:17:27.691844
pkg:github/gerbv/gerbv purl2cpe 2026-06-01 10:17:27.691846
pkg:rpm/fedora/gerbv purl2cpe 2026-06-01 10:17:27.691847
pkg:rpm/opensuse/gerbv purl2cpe 2026-06-01 10:17:27.691848
pkg:sourceforge/gerbv purl2cpe 2026-06-01 10:17:27.691850

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-40401 vulnerable 2026-06-08 05:35:17.922554 Details available
CRITICAL (10)
A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-02-04T00:00:00.000Z
Updated: 2025-04-15T19:12:05.941Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.