Known Vulnerabilities for Gnuplot by Gnuplot Project
Listed below are 5 of the newest known vulnerabilities associated with "Gnuplot" by "Gnuplot Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-58459 json | gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attac... | Not Provided | 2026-07-09 | 2026-07-14 |
| CVE-2025-31181 json | A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash. | Not Provided | 2025-03-27 | 2026-06-26 |
| CVE-2025-31180 json | A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash. | Not Provided | 2025-03-27 | 2026-06-25 |
| CVE-2025-31179 json | A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash. | Not Provided | 2025-03-27 | 2026-06-25 |
| CVE-2025-31178 json | A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash. | Not Provided | 2025-03-27 | 2026-06-25 |
| CVE-2025-31177 json | gnuplot is affected by a heap buffer overflow at function utf8_copy_one. | Not Provided | 2025-05-07 | 2026-06-25 |
| CVE-2025-31176 json | A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash. | Not Provided | 2025-03-27 | 2026-06-25 |
| CVE-2025-3359 json | A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment. | Not Provided | 2025-04-07 | 2026-05-03 |
| CVE-2021-29369 json | The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands. | 9.8 - CRITICAL | 2021-05-03 | 2023-11-07 |
| CVE-2020-25969 json | gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest(). | 9.8 - CRITICAL | 2023-07-05 | 2023-07-11 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Gnuplot Project | Gnuplot | 5.5.0 | |||
| Application | Gnuplot Project | Gnuplot | 5.4.0 | |||
| Application | Gnuplot Project | Gnuplot | 5.2.8 | |||
| Application | Gnuplot Project | Gnuplot | 5.2.7 | |||
| Application | Gnuplot Project | Gnuplot | 5.2.6 | |||
| Application | Gnuplot Project | Gnuplot | 5.2.5 | |||
| Application | Gnuplot Project | Gnuplot | 5.2.4 | |||
| Application | Gnuplot Project | Gnuplot | 5.2.3 | |||
| Application | Gnuplot Project | Gnuplot | 5.2.2 | |||
| Application | Gnuplot Project | Gnuplot | 5.2.1 | |||
| Application | Gnuplot Project | Gnuplot | 5.2.0 | |||
| Application | Gnuplot Project | Gnuplot | 5.2 | |||
| Application | Gnuplot Project | Gnuplot | 5.0.7 | |||
| Application | Gnuplot Project | Gnuplot | 5.0.6 | |||
| Application | Gnuplot Project | Gnuplot | 5.0.5 | |||
| Application | Gnuplot Project | Gnuplot | 5.0.4 | |||
| Application | Gnuplot Project | Gnuplot | 5.0.3 | |||
| Application | Gnuplot Project | Gnuplot | 5.0.2 | |||
| Application | Gnuplot Project | Gnuplot | 5.0.1 | |||
| Application | Gnuplot Project | Gnuplot | 5.0.0 |