Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:apk/alpine/libgit2@0.27.3-r0?arch=x86_64&distroversion=v3.9&reponame=main

Type apk

Namespace alpine

Name libgit2

Version 0.27.3-r0

Qualifiers

arch	x86_64
distroversion	v3.9
reponame	main

Subpath

Is_vulnerable false

Next_non_vulnerable_version null

Latest_non_vulnerable_version null

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-vqs6-suqc-ybc7

vulnerability_id VCID-vqs6-suqc-ybc7

summary

Out-of-bounds Read
A flaw was found in libgit2 which is wrapped by the rugged gem. A missing check
in git_delta_apply function in `delta.c` file, may lead to an out-of-bound read while reading a binary delta file. An attacker may use this flaw to cause a Denial of Service.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2018-10888

reference_id

reference_type

scores

value	0.0062
scoring_system	epss
scoring_elements	0.70373
published_at	2026-05-30T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2018-10888

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1598024
reference_id
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1598024

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903508
reference_id	903508
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903508

reference_url	https://nvd.nist.gov/vuln/detail/CVE-2018-10888
reference_id	CVE-2018-10888
reference_type
scores
url	https://nvd.nist.gov/vuln/detail/CVE-2018-10888

fixed_packages

url	pkg:apk/alpine/libgit2@0.27.3-r0?arch=x86_64&distroversion=v3.9&reponame=main
purl	pkg:apk/alpine/libgit2@0.27.3-r0?arch=x86_64&distroversion=v3.9&reponame=main
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libgit2@0.27.3-r0%3Farch=x86_64&distroversion=v3.9&reponame=main

aliases CVE-2018-10888

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vqs6-suqc-ybc7

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libgit2@0.27.3-r0%3Farch=x86_64&distroversion=v3.9&reponame=main

Package Instance