Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/oslo-utils@3.0.0
Typepypi
Namespace
Nameoslo-utils
Version3.0.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.10.1
Latest_non_vulnerable_version4.10.1
Affected_by_vulnerabilities
0
url VCID-f76m-vpwk-aqfr
vulnerability_id VCID-f76m-vpwk-aqfr
summary A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.
references
0
reference_url https://access.redhat.com/security/cve/CVE-2022-0718
reference_id
reference_type
scores
url https://access.redhat.com/security/cve/CVE-2022-0718
1
reference_url https://bugs.launchpad.net/oslo.utils/+bug/1949623
reference_id
reference_type
scores
url https://bugs.launchpad.net/oslo.utils/+bug/1949623
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2056850
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2056850
3
reference_url https://github.com/advisories/GHSA-wmqq-r32m-87c5
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-wmqq-r32m-87c5
4
reference_url https://opendev.org/openstack/oslo.utils/commit/6e17ae1f7959c64dfd20a5f67edf422e702426aa
reference_id
reference_type
scores
url https://opendev.org/openstack/oslo.utils/commit/6e17ae1f7959c64dfd20a5f67edf422e702426aa
5
reference_url https://security-tracker.debian.org/tracker/CVE-2022-0718
reference_id
reference_type
scores
url https://security-tracker.debian.org/tracker/CVE-2022-0718
fixed_packages
0
url pkg:pypi/oslo-utils@4.10.1
purl pkg:pypi/oslo-utils@4.10.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/oslo-utils@4.10.1
aliases CVE-2022-0718, GHSA-wmqq-r32m-87c5, PYSEC-2022-258
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f76m-vpwk-aqfr
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/oslo-utils@3.0.0