Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/bikeshed@2.4.3
Typepypi
Namespace
Namebikeshed
Version2.4.3
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.0.0
Latest_non_vulnerable_version3.0.0
Affected_by_vulnerabilities
0
url VCID-63vz-b8s1-6fdb
vulnerability_id VCID-63vz-b8s1-6fdb
summary This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Command metadata is processed. When an arbitrary OS command is executed, the command output would be included in the HTML output.
references
0
reference_url https://github.com/advisories/GHSA-87cj-px37-rc3x
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-87cj-px37-rc3x
1
reference_url https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd
reference_id
reference_type
scores
url https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd
2
reference_url https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537646
reference_id
reference_type
scores
url https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537646
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-23422
reference_id CVE-2021-23422
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-23422
fixed_packages
0
url pkg:pypi/bikeshed@3.0.0
purl pkg:pypi/bikeshed@3.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@3.0.0
aliases CVE-2021-23422, GHSA-87cj-px37-rc3x, PYSEC-2021-116, SNYK-PYTHON-BIKESHED-1537646
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-63vz-b8s1-6fdb
1
url VCID-h4ex-q6n4-pyh5
vulnerability_id VCID-h4ex-q6n4-pyh5
summary This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing include, include-code or include-raw block is processed. The contents of arbitrary files could be disclosed in the HTML output.
references
0
reference_url https://github.com/advisories/GHSA-hf6p-4rv2-9qrp
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-hf6p-4rv2-9qrp
1
reference_url https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd
reference_id
reference_type
scores
url https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd
2
reference_url https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537647
reference_id
reference_type
scores
url https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537647
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-23423
reference_id CVE-2021-23423
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-23423
fixed_packages
0
url pkg:pypi/bikeshed@3.0.0
purl pkg:pypi/bikeshed@3.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@3.0.0
aliases CVE-2021-23423, GHSA-hf6p-4rv2-9qrp, PYSEC-2021-117, SNYK-PYTHON-BIKESHED-1537647
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h4ex-q6n4-pyh5
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.4.3