Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/python-authlib@0.15.4-1%2Bdeb11u2?distro=trixie
Typedeb
Namespacedebian
Namepython-authlib
Version0.15.4-1+deb11u2
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.3.1-1
Latest_non_vulnerable_version1.7.2-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-4wgd-2mpe-tyh3
vulnerability_id VCID-4wgd-2mpe-tyh3
summary authlib: Authlib: Authentication bypass via forged OpenID Connect ID Tokens
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-28498.json
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-28498.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-28498
reference_id
reference_type
scores
0
value 0.00029
scoring_system epss
scoring_elements 0.08884
published_at 2026-06-06T12:55:00Z
1
value 0.00029
scoring_system epss
scoring_elements 0.08867
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-28498
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28498
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/authlib/authlib
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/authlib/authlib
5
reference_url https://github.com/authlib/authlib/commit/b9bb2b25bf8b7e01512d847a95c1749646eaa72b
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-16T18:14:21Z/
url https://github.com/authlib/authlib/commit/b9bb2b25bf8b7e01512d847a95c1749646eaa72b
6
reference_url https://github.com/authlib/authlib/releases/tag/v1.6.9
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-16T18:14:21Z/
url https://github.com/authlib/authlib/releases/tag/v1.6.9
7
reference_url https://github.com/authlib/authlib/security/advisories/GHSA-m344-f55w-2m6j
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-16T18:14:21Z/
url https://github.com/authlib/authlib/security/advisories/GHSA-m344-f55w-2m6j
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-28498
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-28498
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2448182
reference_id 2448182
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2448182
10
reference_url https://github.com/advisories/GHSA-m344-f55w-2m6j
reference_id GHSA-m344-f55w-2m6j
reference_type
scores
url https://github.com/advisories/GHSA-m344-f55w-2m6j
11
reference_url https://access.redhat.com/errata/RHSA-2026:6309
reference_id RHSA-2026:6309
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6309
12
reference_url https://access.redhat.com/errata/RHSA-2026:6404
reference_id RHSA-2026:6404
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6404
13
reference_url https://access.redhat.com/errata/RHSA-2026:6497
reference_id RHSA-2026:6497
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6497
14
reference_url https://access.redhat.com/errata/RHSA-2026:6567
reference_id RHSA-2026:6567
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6567
15
reference_url https://access.redhat.com/errata/RHSA-2026:6568
reference_id RHSA-2026:6568
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6568
16
reference_url https://access.redhat.com/errata/RHSA-2026:6720
reference_id RHSA-2026:6720
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6720
17
reference_url https://access.redhat.com/errata/RHSA-2026:6912
reference_id RHSA-2026:6912
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6912
fixed_packages
0
url pkg:deb/debian/python-authlib@0.15.4-1?distro=trixie
purl pkg:deb/debian/python-authlib@0.15.4-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pguz-hqre-77ac
1
vulnerability VCID-sk4t-73s6-rqg9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-authlib@0.15.4-1%3Fdistro=trixie
1
url pkg:deb/debian/python-authlib@0.15.4-1%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/python-authlib@0.15.4-1%2Bdeb11u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-authlib@0.15.4-1%252Bdeb11u2%3Fdistro=trixie
2
url pkg:deb/debian/python-authlib@1.6.9-1?distro=trixie
purl pkg:deb/debian/python-authlib@1.6.9-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-authlib@1.6.9-1%3Fdistro=trixie
3
url pkg:deb/debian/python-authlib@1.7.2-1?distro=trixie
purl pkg:deb/debian/python-authlib@1.7.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-authlib@1.7.2-1%3Fdistro=trixie
aliases CVE-2026-28498, GHSA-m344-f55w-2m6j
risk_score 4.1
exploitability 0.5
weighted_severity 8.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4wgd-2mpe-tyh3
1
url VCID-pt7d-e6h5-kbd2
vulnerability_id VCID-pt7d-e6h5-kbd2
summary authlib: Authlib: Information disclosure due to cryptographic padding oracle in JWE RSA1_5
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-28490.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-28490.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-28490
reference_id
reference_type
scores
0
value 0.00016
scoring_system epss
scoring_elements 0.03808
published_at 2026-06-06T12:55:00Z
1
value 0.00016
scoring_system epss
scoring_elements 0.03807
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-28490
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28490
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28490
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/authlib/authlib
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/authlib/authlib
5
reference_url https://github.com/authlib/authlib/commit/48b345f29f6c459f11c6a40162b6c0b742ef2e22
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-16T18:17:04Z/
url https://github.com/authlib/authlib/commit/48b345f29f6c459f11c6a40162b6c0b742ef2e22
6
reference_url https://github.com/authlib/authlib/releases/tag/v1.6.9
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-16T18:17:04Z/
url https://github.com/authlib/authlib/releases/tag/v1.6.9
7
reference_url https://github.com/authlib/authlib/security/advisories/GHSA-7432-952r-cw78
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-16T18:17:04Z/
url https://github.com/authlib/authlib/security/advisories/GHSA-7432-952r-cw78
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-28490
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-28490
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2448162
reference_id 2448162
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2448162
10
reference_url https://github.com/advisories/GHSA-7432-952r-cw78
reference_id GHSA-7432-952r-cw78
reference_type
scores
url https://github.com/advisories/GHSA-7432-952r-cw78
fixed_packages
0
url pkg:deb/debian/python-authlib@0.15.4-1?distro=trixie
purl pkg:deb/debian/python-authlib@0.15.4-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pguz-hqre-77ac
1
vulnerability VCID-sk4t-73s6-rqg9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-authlib@0.15.4-1%3Fdistro=trixie
1
url pkg:deb/debian/python-authlib@0.15.4-1%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/python-authlib@0.15.4-1%2Bdeb11u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-authlib@0.15.4-1%252Bdeb11u2%3Fdistro=trixie
2
url pkg:deb/debian/python-authlib@1.6.9-1?distro=trixie
purl pkg:deb/debian/python-authlib@1.6.9-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-authlib@1.6.9-1%3Fdistro=trixie
3
url pkg:deb/debian/python-authlib@1.7.2-1?distro=trixie
purl pkg:deb/debian/python-authlib@1.7.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-authlib@1.7.2-1%3Fdistro=trixie
aliases CVE-2026-28490, GHSA-7432-952r-cw78
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pt7d-e6h5-kbd2
2
url VCID-zafh-nuvx-6fch
vulnerability_id VCID-zafh-nuvx-6fch
summary authlib: Authlib: Authentication bypass due to JWK Header Injection vulnerability
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-27962.json
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-27962.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-27962
reference_id
reference_type
scores
0
value 0.00081
scoring_system epss
scoring_elements 0.24028
published_at 2026-06-06T12:55:00Z
1
value 0.00081
scoring_system epss
scoring_elements 0.24045
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-27962
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27962
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/authlib/authlib
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/authlib/authlib
5
reference_url https://github.com/authlib/authlib/commit/a5d4b2d4c9e46bfa11c82f85fdc2bcc0b50ae681
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-03-17T12:43:23Z/
url https://github.com/authlib/authlib/commit/a5d4b2d4c9e46bfa11c82f85fdc2bcc0b50ae681
6
reference_url https://github.com/authlib/authlib/releases/tag/v1.6.9
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-03-17T12:43:23Z/
url https://github.com/authlib/authlib/releases/tag/v1.6.9
7
reference_url https://github.com/authlib/authlib/security/advisories/GHSA-wvwj-cvrp-7pv5
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-03-17T12:43:23Z/
url https://github.com/authlib/authlib/security/advisories/GHSA-wvwj-cvrp-7pv5
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-27962
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-27962
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2448164
reference_id 2448164
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2448164
10
reference_url https://github.com/advisories/GHSA-wvwj-cvrp-7pv5
reference_id GHSA-wvwj-cvrp-7pv5
reference_type
scores
url https://github.com/advisories/GHSA-wvwj-cvrp-7pv5
11
reference_url https://access.redhat.com/errata/RHSA-2026:19375
reference_id RHSA-2026:19375
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:19375
12
reference_url https://access.redhat.com/errata/RHSA-2026:5665
reference_id RHSA-2026:5665
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5665
13
reference_url https://access.redhat.com/errata/RHSA-2026:7314
reference_id RHSA-2026:7314
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:7314
fixed_packages
0
url pkg:deb/debian/python-authlib@0.15.4-1?distro=trixie
purl pkg:deb/debian/python-authlib@0.15.4-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pguz-hqre-77ac
1
vulnerability VCID-sk4t-73s6-rqg9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-authlib@0.15.4-1%3Fdistro=trixie
1
url pkg:deb/debian/python-authlib@0.15.4-1%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/python-authlib@0.15.4-1%2Bdeb11u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-authlib@0.15.4-1%252Bdeb11u2%3Fdistro=trixie
2
url pkg:deb/debian/python-authlib@1.6.9-1?distro=trixie
purl pkg:deb/debian/python-authlib@1.6.9-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-authlib@1.6.9-1%3Fdistro=trixie
3
url pkg:deb/debian/python-authlib@1.7.2-1?distro=trixie
purl pkg:deb/debian/python-authlib@1.7.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-authlib@1.7.2-1%3Fdistro=trixie
aliases CVE-2026-27962, GHSA-wvwj-cvrp-7pv5
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zafh-nuvx-6fch
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/python-authlib@0.15.4-1%252Bdeb11u2%3Fdistro=trixie