Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:alpm/archlinux/firefox@85.0.2-1
Typealpm
Namespacearchlinux
Namefirefox
Version85.0.2-1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version86.0-1
Latest_non_vulnerable_version101.0-1
Affected_by_vulnerabilities
0
url VCID-72xt-c9m7-kqfj
vulnerability_id VCID-72xt-c9m7-kqfj
summary If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive information contained in such URIs.
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23968
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23968
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23969
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23969
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23973
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23973
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23978
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23978
4
reference_url https://security.archlinux.org/AVG-1599
reference_id AVG-1599
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1599
5
reference_url https://security.archlinux.org/AVG-1601
reference_id AVG-1601
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1601
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
reference_id mfsa2021-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-08
reference_id mfsa2021-08
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-08
8
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-09
reference_id mfsa2021-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-09
fixed_packages
0
url pkg:alpm/archlinux/firefox@86.0-1
purl pkg:alpm/archlinux/firefox@86.0-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@86.0-1
aliases CVE-2021-23968
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-72xt-c9m7-kqfj
1
url VCID-75mg-zh1v-w3dv
vulnerability_id VCID-75mg-zh1v-w3dv
summary One phishing tactic on the web is to provide a link with HTTP Auth. For example https://www.phishingtarget.com@evil.com. To mitigate this type of attack, Firefox will display a warning dialog; however, this warning dialog would not have been displayed if evil.com used a redirect that was cached by the browser.
references
0
reference_url https://security.archlinux.org/AVG-1599
reference_id AVG-1599
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1599
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
reference_id mfsa2021-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
fixed_packages
0
url pkg:alpm/archlinux/firefox@86.0-1
purl pkg:alpm/archlinux/firefox@86.0-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@86.0-1
aliases CVE-2021-23972
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-75mg-zh1v-w3dv
2
url VCID-8kxd-bque-r3ed
vulnerability_id VCID-8kxd-bque-r3ed
summary Mozilla developers Alexis Beingessner, Tyson Smith, Nika Layzell, and Mats Palmgren reported memory safety bugs present in Thunderbird 78.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23968
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23968
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23969
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23969
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23973
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23973
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23978
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23978
4
reference_url https://security.archlinux.org/AVG-1599
reference_id AVG-1599
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1599
5
reference_url https://security.archlinux.org/AVG-1601
reference_id AVG-1601
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1601
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
reference_id mfsa2021-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-08
reference_id mfsa2021-08
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-08
8
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-09
reference_id mfsa2021-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-09
fixed_packages
0
url pkg:alpm/archlinux/firefox@86.0-1
purl pkg:alpm/archlinux/firefox@86.0-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@86.0-1
aliases CVE-2021-23978
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8kxd-bque-r3ed
3
url VCID-d36z-y6r2-r7a1
vulnerability_id VCID-d36z-y6r2-r7a1
summary When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource.
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23968
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23968
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23969
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23969
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23973
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23973
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23978
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23978
4
reference_url https://security.archlinux.org/AVG-1599
reference_id AVG-1599
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1599
5
reference_url https://security.archlinux.org/AVG-1601
reference_id AVG-1601
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1601
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
reference_id mfsa2021-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-08
reference_id mfsa2021-08
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-08
8
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-09
reference_id mfsa2021-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-09
fixed_packages
0
url pkg:alpm/archlinux/firefox@86.0-1
purl pkg:alpm/archlinux/firefox@86.0-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@86.0-1
aliases CVE-2021-23973
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d36z-y6r2-r7a1
4
url VCID-nq1q-218q-rbe4
vulnerability_id VCID-nq1q-218q-rbe4
summary As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage." Under certain types of redirects, Thunderbird incorrectly set the source file to be the destination of the redirects. This was fixed to be the redirect destination's origin.
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23968
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23968
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23969
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23969
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23973
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23973
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23978
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23978
4
reference_url https://security.archlinux.org/AVG-1599
reference_id AVG-1599
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1599
5
reference_url https://security.archlinux.org/AVG-1601
reference_id AVG-1601
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1601
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
reference_id mfsa2021-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-08
reference_id mfsa2021-08
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-08
8
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-09
reference_id mfsa2021-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-09
fixed_packages
0
url pkg:alpm/archlinux/firefox@86.0-1
purl pkg:alpm/archlinux/firefox@86.0-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@86.0-1
aliases CVE-2021-23969
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nq1q-218q-rbe4
5
url VCID-pwa5-ga6g-hbhu
vulnerability_id VCID-pwa5-ga6g-hbhu
summary Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code.
references
0
reference_url https://security.archlinux.org/AVG-1599
reference_id AVG-1599
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1599
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
reference_id mfsa2021-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
fixed_packages
0
url pkg:alpm/archlinux/firefox@86.0-1
purl pkg:alpm/archlinux/firefox@86.0-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@86.0-1
aliases CVE-2021-23970
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pwa5-ga6g-hbhu
6
url VCID-tv65-w1kw-e3dx
vulnerability_id VCID-tv65-w1kw-e3dx
summary The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function was invoked we incorrectly called the sizeof function, instead of using the API method that checks for invalid pointers.
references
0
reference_url https://security.archlinux.org/AVG-1599
reference_id AVG-1599
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1599
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
reference_id mfsa2021-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
fixed_packages
0
url pkg:alpm/archlinux/firefox@86.0-1
purl pkg:alpm/archlinux/firefox@86.0-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@86.0-1
aliases CVE-2021-23975
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tv65-w1kw-e3dx
7
url VCID-ukzw-rs52-8fac
vulnerability_id VCID-ukzw-rs52-8fac
summary Mozilla developers Tyson Smith, Lars T Hansen, Valentin Gosu, and Sebastian Hengst reported memory safety bugs present in Firefox 85. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
references
0
reference_url https://security.archlinux.org/AVG-1599
reference_id AVG-1599
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1599
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
reference_id mfsa2021-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
fixed_packages
0
url pkg:alpm/archlinux/firefox@86.0-1
purl pkg:alpm/archlinux/firefox@86.0-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@86.0-1
aliases CVE-2021-23979
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ukzw-rs52-8fac
8
url VCID-urqr-81pw-a7bb
vulnerability_id VCID-urqr-81pw-a7bb
summary The DOMParser API did not properly process <noscript> elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer.
references
0
reference_url https://security.archlinux.org/AVG-1599
reference_id AVG-1599
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1599
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
reference_id mfsa2021-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
fixed_packages
0
url pkg:alpm/archlinux/firefox@86.0-1
purl pkg:alpm/archlinux/firefox@86.0-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@86.0-1
aliases CVE-2021-23974
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-urqr-81pw-a7bb
9
url VCID-xb5v-quee-abce
vulnerability_id VCID-xb5v-quee-abce
summary When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted in more information than intended by the original origin being provided to the destination of the redirect.
references
0
reference_url https://security.archlinux.org/AVG-1599
reference_id AVG-1599
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1599
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
reference_id mfsa2021-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2021-07
fixed_packages
0
url pkg:alpm/archlinux/firefox@86.0-1
purl pkg:alpm/archlinux/firefox@86.0-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@86.0-1
aliases CVE-2021-23971
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xb5v-quee-abce
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@85.0.2-1