Lookup for vulnerable packages by Package URL.

Purlpkg:composer/drupal/core@7.51.0
Typecomposer
Namespacedrupal
Namecore
Version7.51.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version10.4.9
Latest_non_vulnerable_version11.2.8
Affected_by_vulnerabilities
0
url VCID-kwe1-gm4m-tkgf
vulnerability_id VCID-kwe1-gm4m-tkgf
summary
URL Redirection to Untrusted Site (Open Redirect)
Confirmation forms in Drupal make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-9451
reference_id
reference_type
scores
0
value 0.00119
scoring_system epss
scoring_elements 0.30747
published_at 2026-04-21T12:55:00Z
1
value 0.00119
scoring_system epss
scoring_elements 0.30779
published_at 2026-04-01T12:55:00Z
2
value 0.00119
scoring_system epss
scoring_elements 0.30909
published_at 2026-04-02T12:55:00Z
3
value 0.00119
scoring_system epss
scoring_elements 0.30956
published_at 2026-04-04T12:55:00Z
4
value 0.00119
scoring_system epss
scoring_elements 0.30772
published_at 2026-04-07T12:55:00Z
5
value 0.00119
scoring_system epss
scoring_elements 0.30831
published_at 2026-04-08T12:55:00Z
6
value 0.00119
scoring_system epss
scoring_elements 0.30862
published_at 2026-04-09T12:55:00Z
7
value 0.00119
scoring_system epss
scoring_elements 0.30863
published_at 2026-04-11T12:55:00Z
8
value 0.00119
scoring_system epss
scoring_elements 0.3082
published_at 2026-04-12T12:55:00Z
9
value 0.00119
scoring_system epss
scoring_elements 0.30774
published_at 2026-04-13T12:55:00Z
10
value 0.00119
scoring_system epss
scoring_elements 0.30801
published_at 2026-04-16T12:55:00Z
11
value 0.00119
scoring_system epss
scoring_elements 0.30781
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-9451
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9449
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9449
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9451
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9451
3
reference_url https://github.com/drupal/core
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/drupal/core
4
reference_url https://www.drupal.org/SA-CORE-2016-005
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.drupal.org/SA-CORE-2016-005
5
reference_url http://www.debian.org/security/2016/dsa-3718
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2016/dsa-3718
6
reference_url http://www.securityfocus.com/bid/94367
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/94367
7
reference_url https://security.archlinux.org/AVG-75
reference_id AVG-75
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-75
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-9451
reference_id CVE-2016-9451
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-9451
9
reference_url https://github.com/advisories/GHSA-66gr-xrcf-8jpq
reference_id GHSA-66gr-xrcf-8jpq
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-66gr-xrcf-8jpq
fixed_packages
0
url pkg:composer/drupal/core@7.52.0
purl pkg:composer/drupal/core@7.52.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@7.52.0
1
url pkg:composer/drupal/core@8.0.0
purl pkg:composer/drupal/core@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1922-fwnz-wkbt
1
vulnerability VCID-2ctt-zm9j-17bx
2
vulnerability VCID-349d-w26k-mqfw
3
vulnerability VCID-381m-cmnk-ykef
4
vulnerability VCID-3fka-y25d-m7a3
5
vulnerability VCID-3hf4-tvxn-zyh4
6
vulnerability VCID-3sr6-86jw-6fb9
7
vulnerability VCID-48ut-ykkc-83fx
8
vulnerability VCID-4aer-46u2-23f6
9
vulnerability VCID-4wwt-vt76-dbe1
10
vulnerability VCID-53h1-sj47-gugn
11
vulnerability VCID-565p-mgqe-gkfc
12
vulnerability VCID-5kh7-v1uc-wfha
13
vulnerability VCID-636u-5bdw-puh4
14
vulnerability VCID-6ck5-9e5b-w3ay
15
vulnerability VCID-6m8x-cfzp-tkf4
16
vulnerability VCID-77zc-1gc8-r7b7
17
vulnerability VCID-7fs3-gwc7-nkes
18
vulnerability VCID-9f24-vqyt-r7dq
19
vulnerability VCID-9ss3-mvt3-8bem
20
vulnerability VCID-9vdz-1jpq-kue3
21
vulnerability VCID-9wt5-xe6d-n3cb
22
vulnerability VCID-b4yh-gyrx-3yhh
23
vulnerability VCID-bbzr-hbhv-yyee
24
vulnerability VCID-bkxp-gn34-67av
25
vulnerability VCID-c9dm-17vt-4bbc
26
vulnerability VCID-cucx-jfqf-pkd1
27
vulnerability VCID-cuk6-hskr-yyau
28
vulnerability VCID-d4qd-ut89-gbf4
29
vulnerability VCID-dgjq-y5zj-cud1
30
vulnerability VCID-djgn-ezxp-37eu
31
vulnerability VCID-dqf8-ea9f-yber
32
vulnerability VCID-ed6y-c9tz-mbds
33
vulnerability VCID-en3b-g3f3-a3e3
34
vulnerability VCID-fm5k-u7s6-wfhb
35
vulnerability VCID-fwbj-ctxz-2bc6
36
vulnerability VCID-g1rp-twzp-63e1
37
vulnerability VCID-g33x-1paw-7udm
38
vulnerability VCID-ga35-289v-vqhr
39
vulnerability VCID-gzcu-sbks-wyfa
40
vulnerability VCID-h6yp-zj5e-zkbm
41
vulnerability VCID-hgb1-xrne-e7c8
42
vulnerability VCID-hpsp-5qtj-v7dq
43
vulnerability VCID-hwnd-nuv7-jqbh
44
vulnerability VCID-hzr8-ttbu-ebhg
45
vulnerability VCID-j21d-w3g7-cbcg
46
vulnerability VCID-jctf-yffu-hbag
47
vulnerability VCID-jnu7-1j9c-dqck
48
vulnerability VCID-jrb8-jnz4-83c8
49
vulnerability VCID-k1gx-nznx-7qd6
50
vulnerability VCID-kam1-84p4-qych
51
vulnerability VCID-kdnk-7mz5-7ugf
52
vulnerability VCID-krhy-kg1b-rfbk
53
vulnerability VCID-kwe1-gm4m-tkgf
54
vulnerability VCID-m1ur-bb9m-m7d5
55
vulnerability VCID-mapb-hsvc-2khc
56
vulnerability VCID-mt37-qzh7-gyfv
57
vulnerability VCID-n119-gta2-kfg1
58
vulnerability VCID-n7un-zgqv-jfef
59
vulnerability VCID-nc36-atc6-yua6
60
vulnerability VCID-nd8n-5dsu-2fbp
61
vulnerability VCID-qvbt-7e55-4bg4
62
vulnerability VCID-rhj7-dy7q-jkhw
63
vulnerability VCID-rr4q-f5cv-nkah
64
vulnerability VCID-s8u8-xbdk-87dj
65
vulnerability VCID-sktb-khbq-cuaq
66
vulnerability VCID-ssyn-dxp9-3kdq
67
vulnerability VCID-st6v-ch5g-r7h2
68
vulnerability VCID-syrg-ckq7-cbd6
69
vulnerability VCID-u1xx-aazv-bkg5
70
vulnerability VCID-u4w3-usvb-jyf6
71
vulnerability VCID-u5wt-ndvn-3ffg
72
vulnerability VCID-ummk-h11z-bkaj
73
vulnerability VCID-uqcw-p8g2-cfd2
74
vulnerability VCID-v9v6-ae3e-g3hk
75
vulnerability VCID-vevm-4sfk-f7gq
76
vulnerability VCID-vrdx-165p-efda
77
vulnerability VCID-vy1y-zkf3-4ue4
78
vulnerability VCID-w6cz-mg4v-3udj
79
vulnerability VCID-wabj-ty5p-pfd6
80
vulnerability VCID-wbuz-qcp3-43aq
81
vulnerability VCID-ww44-hb2y-mfd5
82
vulnerability VCID-wwvq-399y-rfhc
83
vulnerability VCID-wzgs-fr3u-cbdn
84
vulnerability VCID-x2as-f9fx-9kff
85
vulnerability VCID-xumx-m3zz-jkh6
86
vulnerability VCID-y74s-ghyc-2bhs
87
vulnerability VCID-yare-57j9-j7cs
88
vulnerability VCID-ymka-jfep-87gt
89
vulnerability VCID-yrzt-3m97-53ce
90
vulnerability VCID-yty5-zn46-r3dj
91
vulnerability VCID-zawz-vky5-tkgt
92
vulnerability VCID-zvtp-4we3-qygx
93
vulnerability VCID-zw3u-6ue7-efdf
94
vulnerability VCID-zxqc-67jp-uba7
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.0.0
2
url pkg:composer/drupal/core@8.2.3
purl pkg:composer/drupal/core@8.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1922-fwnz-wkbt
1
vulnerability VCID-349d-w26k-mqfw
2
vulnerability VCID-3fka-y25d-m7a3
3
vulnerability VCID-3hf4-tvxn-zyh4
4
vulnerability VCID-3sr6-86jw-6fb9
5
vulnerability VCID-48ut-ykkc-83fx
6
vulnerability VCID-4aer-46u2-23f6
7
vulnerability VCID-565p-mgqe-gkfc
8
vulnerability VCID-5kh7-v1uc-wfha
9
vulnerability VCID-636u-5bdw-puh4
10
vulnerability VCID-6ck5-9e5b-w3ay
11
vulnerability VCID-6m8x-cfzp-tkf4
12
vulnerability VCID-77zc-1gc8-r7b7
13
vulnerability VCID-7fs3-gwc7-nkes
14
vulnerability VCID-9f24-vqyt-r7dq
15
vulnerability VCID-9ss3-mvt3-8bem
16
vulnerability VCID-9vdz-1jpq-kue3
17
vulnerability VCID-bbzr-hbhv-yyee
18
vulnerability VCID-bkxp-gn34-67av
19
vulnerability VCID-c9dm-17vt-4bbc
20
vulnerability VCID-cucx-jfqf-pkd1
21
vulnerability VCID-cuk6-hskr-yyau
22
vulnerability VCID-d4qd-ut89-gbf4
23
vulnerability VCID-dgjq-y5zj-cud1
24
vulnerability VCID-dqf8-ea9f-yber
25
vulnerability VCID-ed6y-c9tz-mbds
26
vulnerability VCID-fm5k-u7s6-wfhb
27
vulnerability VCID-fwbj-ctxz-2bc6
28
vulnerability VCID-g1rp-twzp-63e1
29
vulnerability VCID-g33x-1paw-7udm
30
vulnerability VCID-ga35-289v-vqhr
31
vulnerability VCID-gzcu-sbks-wyfa
32
vulnerability VCID-hgb1-xrne-e7c8
33
vulnerability VCID-hpsp-5qtj-v7dq
34
vulnerability VCID-hwnd-nuv7-jqbh
35
vulnerability VCID-hzr8-ttbu-ebhg
36
vulnerability VCID-j21d-w3g7-cbcg
37
vulnerability VCID-jctf-yffu-hbag
38
vulnerability VCID-jnu7-1j9c-dqck
39
vulnerability VCID-jrb8-jnz4-83c8
40
vulnerability VCID-k1gx-nznx-7qd6
41
vulnerability VCID-kam1-84p4-qych
42
vulnerability VCID-kdnk-7mz5-7ugf
43
vulnerability VCID-krhy-kg1b-rfbk
44
vulnerability VCID-m1ur-bb9m-m7d5
45
vulnerability VCID-mapb-hsvc-2khc
46
vulnerability VCID-n119-gta2-kfg1
47
vulnerability VCID-n7un-zgqv-jfef
48
vulnerability VCID-nc36-atc6-yua6
49
vulnerability VCID-nd8n-5dsu-2fbp
50
vulnerability VCID-qvbt-7e55-4bg4
51
vulnerability VCID-rhj7-dy7q-jkhw
52
vulnerability VCID-rr4q-f5cv-nkah
53
vulnerability VCID-st6v-ch5g-r7h2
54
vulnerability VCID-syrg-ckq7-cbd6
55
vulnerability VCID-u1xx-aazv-bkg5
56
vulnerability VCID-u4w3-usvb-jyf6
57
vulnerability VCID-ummk-h11z-bkaj
58
vulnerability VCID-uqcw-p8g2-cfd2
59
vulnerability VCID-v9v6-ae3e-g3hk
60
vulnerability VCID-vevm-4sfk-f7gq
61
vulnerability VCID-vrdx-165p-efda
62
vulnerability VCID-w6cz-mg4v-3udj
63
vulnerability VCID-wabj-ty5p-pfd6
64
vulnerability VCID-wbuz-qcp3-43aq
65
vulnerability VCID-ww44-hb2y-mfd5
66
vulnerability VCID-wwvq-399y-rfhc
67
vulnerability VCID-wzgs-fr3u-cbdn
68
vulnerability VCID-x2as-f9fx-9kff
69
vulnerability VCID-y74s-ghyc-2bhs
70
vulnerability VCID-yare-57j9-j7cs
71
vulnerability VCID-ymka-jfep-87gt
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.2.3
aliases CVE-2016-9451, GHSA-66gr-xrcf-8jpq
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kwe1-gm4m-tkgf
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@7.51.0