Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/nebari@2023.10.1rc1
Typepypi
Namespace
Namenebari
Version2023.10.1rc1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2024.6.1rc2
Latest_non_vulnerable_version2024.6.1rc2
Affected_by_vulnerabilities
0
url VCID-eyvw-k5mb-ruda
vulnerability_id VCID-eyvw-k5mb-ruda
summary Nebari through 2024.4.1 prints the temporary Keycloak root password.
references
0
reference_url https://github.com/nebari-dev/nebari/blob/5463e8df9e8d53a266a7b9d3d4e27353ec43c40b/src/_nebari/deploy.py#L71
reference_id
reference_type
scores
url https://github.com/nebari-dev/nebari/blob/5463e8df9e8d53a266a7b9d3d4e27353ec43c40b/src/_nebari/deploy.py#L71
1
reference_url https://github.com/nebari-dev/nebari/issues/2282
reference_id
reference_type
scores
url https://github.com/nebari-dev/nebari/issues/2282
fixed_packages
0
url pkg:pypi/nebari@2024.6.1rc2
purl pkg:pypi/nebari@2024.6.1rc2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/nebari@2024.6.1rc2
aliases CVE-2024-34529, PYSEC-2024-185
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eyvw-k5mb-ruda
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/nebari@2023.10.1rc1