Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/com.hazelcast/hazelcast@5.0.3
Typemaven
Namespacecom.hazelcast
Namehazelcast
Version5.0.3
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version5.2.5
Latest_non_vulnerable_version5.3.5
Affected_by_vulnerabilities
0
url VCID-6sxn-4gta-vfa3
vulnerability_id VCID-6sxn-4gta-vfa3
summary 
Missing Authorization
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don't check client permissions properly, allowing authenticated users to execute tasks on members without the required permissions granted.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-33265
reference_id
reference_type
scores
0
value 0.0023
scoring_system epss
scoring_elements 0.45858
published_at 2026-06-07T12:55:00Z
1
value 0.0023
scoring_system epss
scoring_elements 0.45879
published_at 2026-06-06T12:55:00Z
2
value 0.0023
scoring_system epss
scoring_elements 0.45875
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-33265
1
reference_url https://github.com/hazelcast/hazelcast
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-28T18:30:59Z/
url https://github.com/hazelcast/hazelcast
2
reference_url https://github.com/hazelcast/hazelcast/releases/tag/v5.0.5
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/hazelcast/hazelcast/releases/tag/v5.0.5
3
reference_url https://github.com/hazelcast/hazelcast/releases/tag/v5.1.7
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/hazelcast/hazelcast/releases/tag/v5.1.7
4
reference_url https://github.com/hazelcast/hazelcast/releases/tag/v5.2.4
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/hazelcast/hazelcast/releases/tag/v5.2.4
5
reference_url https://github.com/hazelcast/hazelcast/security/advisories/GHSA-c5vj-wp4v-mmvx
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/hazelcast/hazelcast/security/advisories/GHSA-c5vj-wp4v-mmvx
6
reference_url https://support.hazelcast.com/s/article/Security-Advisory-for-CVE-2023-33265
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-28T18:30:59Z/
url https://support.hazelcast.com/s/article/Security-Advisory-for-CVE-2023-33265
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-33265
reference_id CVE-2023-33265
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-33265
8
reference_url https://github.com/advisories/GHSA-c5vj-wp4v-mmvx
reference_id GHSA-c5vj-wp4v-mmvx
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c5vj-wp4v-mmvx
fixed_packages
0
url pkg:maven/com.hazelcast/hazelcast@5.0.5
purl pkg:maven/com.hazelcast/hazelcast@5.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-qav2-hjzf-u3e3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.hazelcast/hazelcast@5.0.5
1
url pkg:maven/com.hazelcast/hazelcast@5.1.7
purl pkg:maven/com.hazelcast/hazelcast@5.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-c314-3sbp-1yac
1
vulnerability VCID-qav2-hjzf-u3e3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.hazelcast/hazelcast@5.1.7
2
url pkg:maven/com.hazelcast/hazelcast@5.2.4
purl pkg:maven/com.hazelcast/hazelcast@5.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-c314-3sbp-1yac
1
vulnerability VCID-qav2-hjzf-u3e3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.hazelcast/hazelcast@5.2.4
aliases CVE-2023-33265, GHSA-c5vj-wp4v-mmvx
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6sxn-4gta-vfa3
1
url VCID-bpg1-5hnd-23a3
vulnerability_id VCID-bpg1-5hnd-23a3
summary hazelcast: Hazelcast connection caching
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-36437.json
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-36437.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-36437
reference_id
reference_type
scores
0
value 0.00373
scoring_system epss
scoring_elements 0.59338
published_at 2026-06-07T12:55:00Z
1
value 0.00373
scoring_system epss
scoring_elements 0.59293
published_at 2026-06-04T12:55:00Z
2
value 0.00373
scoring_system epss
scoring_elements 0.59343
published_at 2026-06-05T12:55:00Z
3
value 0.00373
scoring_system epss
scoring_elements 0.59347
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-36437
2
reference_url https://github.com/hazelcast/hazelcast
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/hazelcast/hazelcast
3
reference_url https://github.com/hazelcast/hazelcast/security/advisories/GHSA-c5hg-mr8r-f6jp
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-11T22:45:32Z/
url https://github.com/hazelcast/hazelcast/security/advisories/GHSA-c5hg-mr8r-f6jp
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-36437
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-36437
5
reference_url https://support.hazelcast.com/s/article/Security-Advisory-for-CVE-2022-36437
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://support.hazelcast.com/s/article/Security-Advisory-for-CVE-2022-36437
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2162053
reference_id 2162053
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2162053
7
reference_url https://access.redhat.com/errata/RHSA-2023:0483
reference_id RHSA-2023:0483
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0483
8
reference_url https://access.redhat.com/errata/RHSA-2023:0661
reference_id RHSA-2023:0661
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0661
fixed_packages
0
url pkg:maven/com.hazelcast/hazelcast@5.0.4
purl pkg:maven/com.hazelcast/hazelcast@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6sxn-4gta-vfa3
1
vulnerability VCID-qav2-hjzf-u3e3
2
vulnerability VCID-r7vq-ymeq-83h5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.hazelcast/hazelcast@5.0.4
1
url pkg:maven/com.hazelcast/hazelcast@5.1.3
purl pkg:maven/com.hazelcast/hazelcast@5.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6sxn-4gta-vfa3
1
vulnerability VCID-qav2-hjzf-u3e3
2
vulnerability VCID-r7vq-ymeq-83h5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.hazelcast/hazelcast@5.1.3
aliases CVE-2022-36437, GHSA-c5hg-mr8r-f6jp, GMS-2022-8870, GMS-2022-8871, GMS-2022-8872, GMS-2022-8874
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bpg1-5hnd-23a3
2
url VCID-qav2-hjzf-u3e3
vulnerability_id VCID-qav2-hjzf-u3e3
summary 
Missing permission checks on Hazelcast client protocol
In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-45859
reference_id
reference_type
scores
0
value 0.0017
scoring_system epss
scoring_elements 0.37983
published_at 2026-06-07T12:55:00Z
1
value 0.0017
scoring_system epss
scoring_elements 0.38015
published_at 2026-06-06T12:55:00Z
2
value 0.0017
scoring_system epss
scoring_elements 0.38012
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-45859
1
reference_url https://github.com/hazelcast/hazelcast
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/hazelcast/hazelcast
2
reference_url https://github.com/hazelcast/hazelcast/pull/25509
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-01T18:45:07Z/
url https://github.com/hazelcast/hazelcast/pull/25509
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-45859
reference_id CVE-2023-45859
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-45859
4
reference_url https://github.com/advisories/GHSA-xh6m-7cr7-xx66
reference_id GHSA-xh6m-7cr7-xx66
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xh6m-7cr7-xx66
5
reference_url https://github.com/hazelcast/hazelcast/security/advisories/GHSA-xh6m-7cr7-xx66
reference_id GHSA-xh6m-7cr7-xx66
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-01T18:45:07Z/
url https://github.com/hazelcast/hazelcast/security/advisories/GHSA-xh6m-7cr7-xx66
fixed_packages
0
url pkg:maven/com.hazelcast/hazelcast@5.1-BETA-1
purl pkg:maven/com.hazelcast/hazelcast@5.1-BETA-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nbr-7xrg-sug8
1
vulnerability VCID-r7vq-ymeq-83h5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.hazelcast/hazelcast@5.1-BETA-1
1
url pkg:maven/com.hazelcast/hazelcast@5.2-BETA-1
purl pkg:maven/com.hazelcast/hazelcast@5.2-BETA-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-r7vq-ymeq-83h5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.hazelcast/hazelcast@5.2-BETA-1
2
url pkg:maven/com.hazelcast/hazelcast@5.2.5
purl pkg:maven/com.hazelcast/hazelcast@5.2.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.hazelcast/hazelcast@5.2.5
3
url pkg:maven/com.hazelcast/hazelcast@5.3.5
purl pkg:maven/com.hazelcast/hazelcast@5.3.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.hazelcast/hazelcast@5.3.5
aliases CVE-2023-45859, GHSA-xh6m-7cr7-xx66
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qav2-hjzf-u3e3
3
url VCID-r7vq-ymeq-83h5
vulnerability_id VCID-r7vq-ymeq-83h5
summary 
Hazelcast vulnerable to unmasked password exposure
In Hazelcast before 5.3.0, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-33264.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-33264.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-33264
reference_id
reference_type
scores
0
value 0.01005
scoring_system epss
scoring_elements 0.77414
published_at 2026-06-07T12:55:00Z
1
value 0.02532
scoring_system epss
scoring_elements 0.85739
published_at 2026-06-05T12:55:00Z
2
value 0.02532
scoring_system epss
scoring_elements 0.85742
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-33264
2
reference_url https://github.com/hazelcast/hazelcast
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/hazelcast/hazelcast
3
reference_url https://github.com/hazelcast/hazelcast/commit/74eed86c2b2b727148c442e98a01d0ca6941a49e
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/hazelcast/hazelcast/commit/74eed86c2b2b727148c442e98a01d0ca6941a49e
4
reference_url https://github.com/hazelcast/hazelcast/pull/24266
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-21T15:19:12Z/
url https://github.com/hazelcast/hazelcast/pull/24266
5
reference_url https://github.com/hazelcast/hazelcast/pull/24266/commits/80a502d53cc48bf895711ab55f95e3a51e344ac1
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/hazelcast/hazelcast/pull/24266/commits/80a502d53cc48bf895711ab55f95e3a51e344ac1
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2210316
reference_id 2210316
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2210316
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-33264
reference_id CVE-2023-33264
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-33264
8
reference_url https://github.com/advisories/GHSA-5gj6-62g7-vmgf
reference_id GHSA-5gj6-62g7-vmgf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5gj6-62g7-vmgf
fixed_packages
0
url pkg:maven/com.hazelcast/hazelcast@5.0.5
purl pkg:maven/com.hazelcast/hazelcast@5.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-qav2-hjzf-u3e3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.hazelcast/hazelcast@5.0.5
1
url pkg:maven/com.hazelcast/hazelcast@5.1.6
purl pkg:maven/com.hazelcast/hazelcast@5.1.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6sxn-4gta-vfa3
1
vulnerability VCID-qav2-hjzf-u3e3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.hazelcast/hazelcast@5.1.6
2
url pkg:maven/com.hazelcast/hazelcast@5.2.4
purl pkg:maven/com.hazelcast/hazelcast@5.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-c314-3sbp-1yac
1
vulnerability VCID-qav2-hjzf-u3e3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.hazelcast/hazelcast@5.2.4
3
url pkg:maven/com.hazelcast/hazelcast@5.3.0
purl pkg:maven/com.hazelcast/hazelcast@5.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-c314-3sbp-1yac
1
vulnerability VCID-qav2-hjzf-u3e3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.hazelcast/hazelcast@5.3.0
aliases CVE-2023-33264, GHSA-5gj6-62g7-vmgf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r7vq-ymeq-83h5
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/com.hazelcast/hazelcast@5.0.3