Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.10
Typemaven
Namespaceorg.ops4j.pax.logging
Namepax-logging-log4j2
Version1.10.10
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.11.13
Latest_non_vulnerable_version2.0.14
Affected_by_vulnerabilities
0
url VCID-gnhu-4afv-pfhy
vulnerability_id VCID-gnhu-4afv-pfhy
summary Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in org.ops4j.pax.logging:pax-logging-log4j2.
references
0
reference_url https://github.com/ops4j/org.ops4j.pax.logging
reference_id
reference_type
scores
0
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ops4j/org.ops4j.pax.logging
1
reference_url https://github.com/advisories/GHSA-jfh8-c2jp-5v3q
reference_id GHSA-jfh8-c2jp-5v3q
reference_type
scores
0
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-jfh8-c2jp-5v3q
2
reference_url https://github.com/advisories/GHSA-xxfh-x98p-j8fr
reference_id GHSA-xxfh-x98p-j8fr
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xxfh-x98p-j8fr
3
reference_url https://github.com/ops4j/org.ops4j.pax.logging/security/advisories/GHSA-xxfh-x98p-j8fr
reference_id GHSA-xxfh-x98p-j8fr
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ops4j/org.ops4j.pax.logging/security/advisories/GHSA-xxfh-x98p-j8fr
fixed_packages
0
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.10
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-r67p-yqg2-9bbq
2
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.10
1
url pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.11
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8977-tjss-w7ba
1
vulnerability VCID-r67p-yqg2-9bbq
2
vulnerability VCID-sjuz-dd96-sqe3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@2.0.11
aliases GHSA-xxfh-x98p-j8fr, GMS-2021-75
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gnhu-4afv-pfhy
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.10