Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/nnabla@0.9.1rc3
Typepypi
Namespace
Namennabla
Version0.9.1rc3
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.0.15
Latest_non_vulnerable_version1.0.15
Affected_by_vulnerabilities
0
url VCID-1xuq-1aby-e3ax
vulnerability_id VCID-1xuq-1aby-e3ax
summary nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable, which might be untrusted.
references
0
reference_url https://github.com/advisories/GHSA-4q2w-rw7m-xqw6
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-4q2w-rw7m-xqw6
1
reference_url https://github.com/sony/nnabla/issues/209
reference_id
reference_type
scores
url https://github.com/sony/nnabla/issues/209
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-10844
reference_id CVE-2019-10844
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2019-10844
fixed_packages
0
url pkg:pypi/nnabla@1.0.15
purl pkg:pypi/nnabla@1.0.15
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/nnabla@1.0.15
aliases CVE-2019-10844, GHSA-4q2w-rw7m-xqw6, PYSEC-2019-107
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1xuq-1aby-e3ax
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/nnabla@0.9.1rc3