Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/nnabla@1.0.15
Typepypi
Namespace
Namennabla
Version1.0.15
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-1xuq-1aby-e3ax
vulnerability_id VCID-1xuq-1aby-e3ax
summary nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable, which might be untrusted.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10844
reference_id
reference_type
scores
0
value 0.00389
scoring_system epss
scoring_elements 0.60315
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10844
1
reference_url https://github.com/advisories/GHSA-4q2w-rw7m-xqw6
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-4q2w-rw7m-xqw6
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/nnabla/PYSEC-2019-107.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/nnabla/PYSEC-2019-107.yaml
3
reference_url https://github.com/sony/nnabla
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/sony/nnabla
4
reference_url https://github.com/sony/nnabla/commit/e87347648ab7210529a0e60f0849680de8e9b63a
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/sony/nnabla/commit/e87347648ab7210529a0e60f0849680de8e9b63a
5
reference_url https://github.com/sony/nnabla/issues/209
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/sony/nnabla/issues/209
6
reference_url https://github.com/sony/nnabla/pull/299
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/sony/nnabla/pull/299
7
reference_url https://github.com/sony/nnabla/releases/tag/v1.0.10
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/sony/nnabla/releases/tag/v1.0.10
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-10844
reference_id CVE-2019-10844
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-10844
fixed_packages
0
url pkg:pypi/nnabla@1.0.10
purl pkg:pypi/nnabla@1.0.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xuq-1aby-e3ax
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/nnabla@1.0.10
1
url pkg:pypi/nnabla@1.0.15
purl pkg:pypi/nnabla@1.0.15
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/nnabla@1.0.15
aliases CVE-2019-10844, GHSA-4q2w-rw7m-xqw6, PYSEC-2019-107
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1xuq-1aby-e3ax
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/nnabla@1.0.15