Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/29219?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/29219?format=api", "purl": "pkg:pypi/rdiffweb@1.2.2", "type": "pypi", "namespace": "", "name": "rdiffweb", "version": "1.2.2", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "2.8.4", "latest_non_vulnerable_version": "2.8.4", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36239?format=api", "vulnerability_id": "VCID-1fg8-rcx8-77fq", "summary": "Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/e974df75bdbcff3996ad70bd1b4424ec1485ea3f", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/e974df75bdbcff3996ad70bd1b4424ec1485ea3f" }, { "reference_url": "https://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29291?format=api", "purl": "pkg:pypi/rdiffweb@2.4.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.7" } ], "aliases": [ "CVE-2022-3274", "PYSEC-2022-289" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1fg8-rcx8-77fq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36327?format=api", "vulnerability_id": "VCID-25yw-5nru-aygm", "summary": "Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/b2df3679564d0daa2856213bb307d3e34bd89a25", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/b2df3679564d0daa2856213bb307d3e34bd89a25" }, { "reference_url": "https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/30266?format=api", "purl": "pkg:pypi/rdiffweb@2.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.2" } ], "aliases": [ "CVE-2022-4314", "PYSEC-2022-43002" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-25yw-5nru-aygm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36349?format=api", "vulnerability_id": "VCID-287j-23ju-9fhk", "summary": "Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d" }, { "reference_url": "https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/31062?format=api", "purl": "pkg:pypi/rdiffweb@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-52wf-fheq-cuer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5" } ], "aliases": [ "CVE-2022-4720", "PYSEC-2022-43006" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-287j-23ju-9fhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36246?format=api", "vulnerability_id": "VCID-29xz-5wxu-ybed", "summary": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5" }, { "reference_url": "https://huntr.dev/bounties/f9fedf94-41c9-49c4-8552-e407123a44e7", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/f9fedf94-41c9-49c4-8552-e407123a44e7" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29293?format=api", "purl": "pkg:pypi/rdiffweb@2.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8" } ], "aliases": [ "CVE-2022-3298", "PYSEC-2022-294" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-29xz-5wxu-ybed" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36558?format=api", "vulnerability_id": "VCID-52wf-fheq-cuer", "summary": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/06f89b43469aae70e8833e55192721523f86c5a2", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://github.com/ikus060/rdiffweb/commit/06f89b43469aae70e8833e55192721523f86c5a2" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2023-186.yaml", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2023-186.yaml" }, { "reference_url": "https://huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5289", "reference_id": "CVE-2023-5289", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5289" }, { "reference_url": "https://github.com/advisories/GHSA-c4rv-2j6x-pq7x", "reference_id": "GHSA-c4rv-2j6x-pq7x", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-c4rv-2j6x-pq7x" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/36165?format=api", "purl": "pkg:pypi/rdiffweb@2.8.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.8.4" } ], "aliases": [ "CVE-2023-5289", "GHSA-c4rv-2j6x-pq7x", "PYSEC-2023-186" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-52wf-fheq-cuer" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36340?format=api", "vulnerability_id": "VCID-57wc-s2nn-cyeu", "summary": "Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398" }, { "reference_url": "https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/30418?format=api", "purl": "pkg:pypi/rdiffweb@2.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.4" } ], "aliases": [ "CVE-2022-4646", "PYSEC-2022-43004" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-57wc-s2nn-cyeu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36203?format=api", "vulnerability_id": "VCID-5922-k3p7-pfdj", "summary": "Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3.", "references": [ { "reference_url": "https://github.com/advisories/GHSA-vq4h-xrwc-m639", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-vq4h-xrwc-m639" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/9125f5a2d918fed0f3fc1c86fa94cd1779ed9f73", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/9125f5a2d918fed0f3fc1c86fa94cd1779ed9f73" }, { "reference_url": "https://huntr.dev/bounties/1fa1aac9-b16a-4a70-a7da-960b3908ae1d", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/1fa1aac9-b16a-4a70-a7da-960b3908ae1d" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29286?format=api", "purl": "pkg:pypi/rdiffweb@2.4.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-fxxn-nnzy-97bv" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-pva4-gkpj-juh8" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tjr6-1mzd-93ee" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-z43n-dk6v-pffh" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.3" } ], "aliases": [ "CVE-2022-3221", "GHSA-vq4h-xrwc-m639", "PYSEC-2022-278" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5922-k3p7-pfdj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36312?format=api", "vulnerability_id": "VCID-5xg7-u3nr-nkfg", "summary": "Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/6efb995bc32c8a8e9ad755eb813dec991dffb2b8", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/6efb995bc32c8a8e9ad755eb813dec991dffb2b8" }, { "reference_url": "https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3362", "PYSEC-2022-43000" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5xg7-u3nr-nkfg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36347?format=api", "vulnerability_id": "VCID-6zc1-xs64-1bc6", "summary": "Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/c4a19cf67d575c4886171b8efcbf4675d51f3929", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/c4a19cf67d575c4886171b8efcbf4675d51f3929" }, { "reference_url": "https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/31062?format=api", "purl": "pkg:pypi/rdiffweb@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-52wf-fheq-cuer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5" } ], "aliases": [ "CVE-2022-4724", "PYSEC-2022-43010" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6zc1-xs64-1bc6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36195?format=api", "vulnerability_id": "VCID-91jt-tgps-27b2", "summary": "Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.", "references": [ { "reference_url": "https://github.com/advisories/GHSA-ch4c-278q-5654", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-ch4c-278q-5654" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5" }, { "reference_url": "https://huntr.dev/bounties/c40badc3-c9e7-4b69-9e2e-2b9f05865159", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/c40badc3-c9e7-4b69-9e2e-2b9f05865159" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29278?format=api", "purl": "pkg:pypi/rdiffweb@2.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5922-k3p7-pfdj" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-fxxn-nnzy-97bv" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-pva4-gkpj-juh8" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tjr6-1mzd-93ee" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-z43n-dk6v-pffh" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2" } ], "aliases": [ "CVE-2022-3175", "GHSA-ch4c-278q-5654", "PYSEC-2022-273" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-91jt-tgps-27b2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36314?format=api", "vulnerability_id": "VCID-9f5c-ne9b-27fd", "summary": "Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095" }, { "reference_url": "https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29462?format=api", "purl": "pkg:pypi/rdiffweb@2.4.11a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1" } ], "aliases": [ "CVE-2022-4018", "PYSEC-2022-43001" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9f5c-ne9b-27fd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36244?format=api", "vulnerability_id": "VCID-dpbu-gy6u-abd3", "summary": "Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3" }, { "reference_url": "https://huntr.dev/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29293?format=api", "purl": "pkg:pypi/rdiffweb@2.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8" } ], "aliases": [ "CVE-2022-3272", "PYSEC-2022-291" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dpbu-gy6u-abd3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36196?format=api", "vulnerability_id": "VCID-e351-976k-sqak", "summary": "Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.", "references": [ { "reference_url": "https://github.com/advisories/GHSA-mp5p-g2jv-r8qw", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-mp5p-g2jv-r8qw" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5" }, { "reference_url": "https://huntr.dev/bounties/58eae29e-3619-449d-9bba-fdcbabcba5fe", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/58eae29e-3619-449d-9bba-fdcbabcba5fe" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29278?format=api", "purl": "pkg:pypi/rdiffweb@2.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5922-k3p7-pfdj" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-fxxn-nnzy-97bv" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-pva4-gkpj-juh8" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tjr6-1mzd-93ee" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-z43n-dk6v-pffh" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2" } ], "aliases": [ "CVE-2022-3179", "GHSA-mp5p-g2jv-r8qw", "PYSEC-2022-272" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e351-976k-sqak" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36351?format=api", "vulnerability_id": "VCID-ep38-eu98-fbas", "summary": "Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d" }, { "reference_url": "https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/31062?format=api", "purl": "pkg:pypi/rdiffweb@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-52wf-fheq-cuer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5" } ], "aliases": [ "CVE-2022-4721", "PYSEC-2022-43007" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ep38-eu98-fbas" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36279?format=api", "vulnerability_id": "VCID-fcym-y8c1-xqdq", "summary": "Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/afc1bdfab5161c74012ff2590a6ec49cc0d8fde0", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://github.com/ikus060/rdiffweb/commit/afc1bdfab5161c74012ff2590a6ec49cc0d8fde0" }, { "reference_url": "https://huntr.dev/bounties/cfcab02e-d6ad-4dcf-b1b0-da90434bc55b", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://huntr.dev/bounties/cfcab02e-d6ad-4dcf-b1b0-da90434bc55b" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3457", "PYSEC-2022-43161" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fcym-y8c1-xqdq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36204?format=api", "vulnerability_id": "VCID-fxxn-nnzy-97bv", "summary": "Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71" }, { "reference_url": "https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29288?format=api", "purl": "pkg:pypi/rdiffweb@2.4.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-pva4-gkpj-juh8" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tjr6-1mzd-93ee" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-z43n-dk6v-pffh" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.5" } ], "aliases": [ "CVE-2022-3232", "PYSEC-2022-281" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fxxn-nnzy-97bv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36350?format=api", "vulnerability_id": "VCID-h6v3-24fq-3udw", "summary": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/6e9ee210548f6d3210704cac302cfc7cdb239765", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/6e9ee210548f6d3210704cac302cfc7cdb239765" }, { "reference_url": "https://huntr.dev/bounties/9369681b-8bfc-4146-a54c-c5108442d92c", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/9369681b-8bfc-4146-a54c-c5108442d92c" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/31062?format=api", "purl": "pkg:pypi/rdiffweb@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-52wf-fheq-cuer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5" } ], "aliases": [ "CVE-2022-4723", "PYSEC-2022-43009" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h6v3-24fq-3udw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36191?format=api", "vulnerability_id": "VCID-khum-ewzn-yfe6", "summary": "Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.", "references": [ { "reference_url": "https://github.com/advisories/GHSA-m379-x4xc-38x9", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-m379-x4xc-38x9" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/7294bb7466532762c93d711211e5958940c1b428", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/7294bb7466532762c93d711211e5958940c1b428" }, { "reference_url": "https://huntr.dev/bounties/e5c2625b-34cc-4805-8223-80f2689e4e5c", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/e5c2625b-34cc-4805-8223-80f2689e4e5c" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29269?format=api", "purl": "pkg:pypi/rdiffweb@2.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5922-k3p7-pfdj" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-91jt-tgps-27b2" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-e351-976k-sqak" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-fxxn-nnzy-97bv" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-n9ht-12n5-b7c9" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-pva4-gkpj-juh8" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tjr6-1mzd-93ee" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-z43n-dk6v-pffh" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.1" } ], "aliases": [ "CVE-2022-3167", "GHSA-m379-x4xc-38x9", "PYSEC-2022-268" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-khum-ewzn-yfe6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36243?format=api", "vulnerability_id": "VCID-mr71-9e9c-zbda", "summary": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3" }, { "reference_url": "https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29293?format=api", "purl": "pkg:pypi/rdiffweb@2.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8" } ], "aliases": [ "CVE-2022-3295", "PYSEC-2022-293" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mr71-9e9c-zbda" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36259?format=api", "vulnerability_id": "VCID-n88y-9qre-n3bz", "summary": "Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/4d464b467f14b8eb9103d7f5f0774e49995527c7", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://github.com/ikus060/rdiffweb/commit/4d464b467f14b8eb9103d7f5f0774e49995527c7" }, { "reference_url": "https://huntr.dev/bounties/bc5689e4-221a-4200-a8ab-42c659f89f67", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://huntr.dev/bounties/bc5689e4-221a-4200-a8ab-42c659f89f67" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3438", "PYSEC-2022-43158" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n88y-9qre-n3bz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36194?format=api", "vulnerability_id": "VCID-n9ht-12n5-b7c9", "summary": "Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.", "references": [ { "reference_url": "https://github.com/advisories/GHSA-mjw4-xvx6-3grg", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-mjw4-xvx6-3grg" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7e", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7e" }, { "reference_url": "https://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29278?format=api", "purl": "pkg:pypi/rdiffweb@2.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5922-k3p7-pfdj" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-fxxn-nnzy-97bv" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-pva4-gkpj-juh8" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tjr6-1mzd-93ee" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-z43n-dk6v-pffh" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2" } ], "aliases": [ "CVE-2022-3174", "GHSA-mjw4-xvx6-3grg", "PYSEC-2022-271" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n9ht-12n5-b7c9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36242?format=api", "vulnerability_id": "VCID-nc4e-1muy-1kd7", "summary": "Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e" }, { "reference_url": "https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29293?format=api", "purl": "pkg:pypi/rdiffweb@2.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8" } ], "aliases": [ "CVE-2022-3301", "PYSEC-2022-295" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nc4e-1muy-1kd7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36287?format=api", "vulnerability_id": "VCID-ps4e-cg34-wyah", "summary": "Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2" }, { "reference_url": "https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3363", "PYSEC-2022-42978" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ps4e-cg34-wyah" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36236?format=api", "vulnerability_id": "VCID-pva4-gkpj-juh8", "summary": "Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/ac334dd27ceadac0661b1e2e059a8423433c3fee", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/ac334dd27ceadac0661b1e2e059a8423433c3fee" }, { "reference_url": "https://huntr.dev/bounties/39889a3f-8bb7-448a-b0d4-a18c671bbd23", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/39889a3f-8bb7-448a-b0d4-a18c671bbd23" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29290?format=api", "purl": "pkg:pypi/rdiffweb@2.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6" } ], "aliases": [ "CVE-2022-3250", "PYSEC-2022-287" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pva4-gkpj-juh8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36346?format=api", "vulnerability_id": "VCID-qcsd-5htt-h3ev", "summary": "Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/d1aaa96b665a39fba9e98d6054a9de511ba0a837", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/d1aaa96b665a39fba9e98d6054a9de511ba0a837" }, { "reference_url": "https://huntr.dev/bounties/c62126dc-d9a6-4d3e-988d-967031876c58", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/c62126dc-d9a6-4d3e-988d-967031876c58" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/31062?format=api", "purl": "pkg:pypi/rdiffweb@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-52wf-fheq-cuer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5" } ], "aliases": [ "CVE-2022-4722", "PYSEC-2022-43008" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qcsd-5htt-h3ev" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36280?format=api", "vulnerability_id": "VCID-rynh-v7q5-6kdg", "summary": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311" }, { "reference_url": "https://huntr.dev/bounties/37b86c45-b240-4626-bd53-b6f02d10e0d7", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://huntr.dev/bounties/37b86c45-b240-4626-bd53-b6f02d10e0d7" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3439", "PYSEC-2022-43159" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rynh-v7q5-6kdg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36257?format=api", "vulnerability_id": "VCID-sn4z-f439-6qe7", "summary": "Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/2ffc2af65c8f8113b06e0b89929c604bcdf844b9", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://github.com/ikus060/rdiffweb/commit/2ffc2af65c8f8113b06e0b89929c604bcdf844b9" }, { "reference_url": "https://huntr.dev/bounties/a9021e93-6d18-4ac1-98ce-550c4697a4ed", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://huntr.dev/bounties/a9021e93-6d18-4ac1-98ce-550c4697a4ed" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29462?format=api", "purl": "pkg:pypi/rdiffweb@2.4.11a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1" } ], "aliases": [ "CVE-2022-3376", "PYSEC-2022-43157" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sn4z-f439-6qe7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36240?format=api", "vulnerability_id": "VCID-t1sj-158f-efey", "summary": "Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/39e7dcd4a1f44d2a7bd92b79d78a800910b1b22b", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/39e7dcd4a1f44d2a7bd92b79d78a800910b1b22b" }, { "reference_url": "https://huntr.dev/bounties/67c25969-5e7a-4424-817e-e1a918f63cc6", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/67c25969-5e7a-4424-817e-e1a918f63cc6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29291?format=api", "purl": "pkg:pypi/rdiffweb@2.4.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.7" } ], "aliases": [ "CVE-2022-3269", "PYSEC-2022-290" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-t1sj-158f-efey" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36237?format=api", "vulnerability_id": "VCID-tjr6-1mzd-93ee", "summary": "Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/18a5aabd48fa6d2d2771a25f95610c28a1a097ca", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/18a5aabd48fa6d2d2771a25f95610c28a1a097ca" }, { "reference_url": "https://huntr.dev/bounties/5ec206e0-eca0-4957-9af4-fdd9185d1db3", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/5ec206e0-eca0-4957-9af4-fdd9185d1db3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29290?format=api", "purl": "pkg:pypi/rdiffweb@2.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6" } ], "aliases": [ "CVE-2022-3233", "PYSEC-2022-285" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tjr6-1mzd-93ee" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36339?format=api", "vulnerability_id": "VCID-tv4c-g8r6-xbf6", "summary": "Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/5f861670ef8f38ca8eea52a98672d0e0fabb5368", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/5f861670ef8f38ca8eea52a98672d0e0fabb5368" }, { "reference_url": "https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/30418?format=api", "purl": "pkg:pypi/rdiffweb@2.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.4" } ], "aliases": [ "CVE-2022-4644", "PYSEC-2022-43003" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tv4c-g8r6-xbf6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36245?format=api", "vulnerability_id": "VCID-vmrb-sm2h-hqf1", "summary": "Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3" }, { "reference_url": "https://huntr.dev/bounties/d8b8519d-96a5-484c-8141-624c54290bf5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://huntr.dev/bounties/d8b8519d-96a5-484c-8141-624c54290bf5" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29293?format=api", "purl": "pkg:pypi/rdiffweb@2.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8" } ], "aliases": [ "CVE-2022-3290", "PYSEC-2022-292", "PYSEC-2022-43184" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vmrb-sm2h-hqf1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36348?format=api", "vulnerability_id": "VCID-wyn5-w4qh-nfht", "summary": "Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d" }, { "reference_url": "https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/31062?format=api", "purl": "pkg:pypi/rdiffweb@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-52wf-fheq-cuer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5" } ], "aliases": [ "CVE-2022-4719", "PYSEC-2022-43005" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wyn5-w4qh-nfht" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36278?format=api", "vulnerability_id": "VCID-yssm-eyx3-efhs", "summary": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311" }, { "reference_url": "https://huntr.dev/bounties/b34412ca-50c5-4615-b7e3-5d07d33acfce", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://huntr.dev/bounties/b34412ca-50c5-4615-b7e3-5d07d33acfce" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3456", "PYSEC-2022-43160" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yssm-eyx3-efhs" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36283?format=api", "vulnerability_id": "VCID-yz9x-nz9u-wybe", "summary": "Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095" }, { "reference_url": "https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29295?format=api", "purl": "pkg:pypi/rdiffweb@2.4.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10" } ], "aliases": [ "CVE-2022-3327", "PYSEC-2022-42977" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yz9x-nz9u-wybe" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36238?format=api", "vulnerability_id": "VCID-z43n-dk6v-pffh", "summary": "Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314" }, { "reference_url": "https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29290?format=api", "purl": "pkg:pypi/rdiffweb@2.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6" } ], "aliases": [ "CVE-2022-3267", "PYSEC-2022-284" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z43n-dk6v-pffh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36256?format=api", "vulnerability_id": "VCID-zzjz-9wv2-vfcc", "summary": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8" }, { "reference_url": "https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29462?format=api", "purl": "pkg:pypi/rdiffweb@2.4.11a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1" } ], "aliases": [ "CVE-2022-3273", "PYSEC-2022-43156" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zzjz-9wv2-vfcc" } ], "fixing_vulnerabilities": [], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@1.2.2" }