Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:pypi/modulemd@0.1

Type pypi

Namespace

Name modulemd

Version 0.1

Qualifiers

Subpath

Is_vulnerable true

Next_non_vulnerable_version 1.3.2

Latest_non_vulnerable_version 1.3.2

Affected_by_vulnerabilities

url VCID-ftbw-kyb3-uucb

vulnerability_id VCID-ftbw-kyb3-uucb

summary modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.

references

reference_url	https://github.com/advisories/GHSA-jhjh-ghwx-6h7r
reference_id
reference_type
scores
url	https://github.com/advisories/GHSA-jhjh-ghwx-6h7r

reference_url	https://github.com/pypa/advisory-database/tree/main/vulns/modulemd/PYSEC-2019-153.yaml
reference_id
reference_type
scores
url	https://github.com/pypa/advisory-database/tree/main/vulns/modulemd/PYSEC-2019-153.yaml

reference_url	https://github.com/xsuchy/modulemd
reference_id
reference_type
scores
url	https://github.com/xsuchy/modulemd

reference_url	https://pagure.io/modulemd/issue/55
reference_id
reference_type
scores
url	https://pagure.io/modulemd/issue/55

reference_url	https://nvd.nist.gov/vuln/detail/CVE-2017-1002157
reference_id	CVE-2017-1002157
reference_type
scores
url	https://nvd.nist.gov/vuln/detail/CVE-2017-1002157

fixed_packages

url	pkg:pypi/modulemd@1.3.2
purl	pkg:pypi/modulemd@1.3.2
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:pypi/modulemd@1.3.2

aliases CVE-2017-1002157, GHSA-jhjh-ghwx-6h7r, PYSEC-2019-153

risk_score null

exploitability null

weighted_severity null

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ftbw-kyb3-uucb

Fixing_vulnerabilities

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/modulemd@0.1

Package Instance