Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/io.smallrye.config/smallrye-config@1.6.2
Typemaven
Namespaceio.smallrye.config
Namesmallrye-config
Version1.6.2
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-vhk6-ks9x-1kes
vulnerability_id VCID-vhk6-ks9x-1kes
summary 
Incorrect Authorization
A flaw was found in SmallRye's API through version 1.6.1. The API can allow other code running within the application server to potentially obtain the ClassLoader, bypassing any permissions checks that should have been applied. The largest threat from this vulnerability is a threat to data confidentiality. This is fixed in SmallRye 1.6.2
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1729.json
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1729.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1729
reference_id
reference_type
scores
0
value 0.00038
scoring_system epss
scoring_elements 0.11184
published_at 2026-04-29T12:55:00Z
1
value 0.00038
scoring_system epss
scoring_elements 0.11382
published_at 2026-04-12T12:55:00Z
2
value 0.00038
scoring_system epss
scoring_elements 0.11354
published_at 2026-04-13T12:55:00Z
3
value 0.00038
scoring_system epss
scoring_elements 0.11213
published_at 2026-04-16T12:55:00Z
4
value 0.00038
scoring_system epss
scoring_elements 0.11216
published_at 2026-04-18T12:55:00Z
5
value 0.00038
scoring_system epss
scoring_elements 0.11345
published_at 2026-04-21T12:55:00Z
6
value 0.00038
scoring_system epss
scoring_elements 0.11285
published_at 2026-04-24T12:55:00Z
7
value 0.00038
scoring_system epss
scoring_elements 0.11245
published_at 2026-04-26T12:55:00Z
8
value 0.00038
scoring_system epss
scoring_elements 0.1128
published_at 2026-04-01T12:55:00Z
9
value 0.00038
scoring_system epss
scoring_elements 0.1142
published_at 2026-04-02T12:55:00Z
10
value 0.00038
scoring_system epss
scoring_elements 0.11479
published_at 2026-04-04T12:55:00Z
11
value 0.00038
scoring_system epss
scoring_elements 0.11268
published_at 2026-04-07T12:55:00Z
12
value 0.00038
scoring_system epss
scoring_elements 0.1135
published_at 2026-04-08T12:55:00Z
13
value 0.00038
scoring_system epss
scoring_elements 0.11408
published_at 2026-04-09T12:55:00Z
14
value 0.00038
scoring_system epss
scoring_elements 0.11415
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1729
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1802444
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1802444
3
reference_url https://github.com/smallrye/smallrye-config/commit/fb0def6f61c09a2a80c9145e4ec6521225cd0b99
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/smallrye/smallrye-config/commit/fb0def6f61c09a2a80c9145e4ec6521225cd0b99
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1729
reference_id CVE-2020-1729
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1729
5
reference_url https://github.com/advisories/GHSA-54fx-gm74-q676
reference_id GHSA-54fx-gm74-q676
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-54fx-gm74-q676
6
reference_url https://access.redhat.com/errata/RHSA-2020:2058
reference_id RHSA-2020:2058
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2058
7
reference_url https://access.redhat.com/errata/RHSA-2020:2059
reference_id RHSA-2020:2059
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2059
8
reference_url https://access.redhat.com/errata/RHSA-2020:2060
reference_id RHSA-2020:2060
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2060
9
reference_url https://access.redhat.com/errata/RHSA-2020:2061
reference_id RHSA-2020:2061
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2061
10
reference_url https://access.redhat.com/errata/RHSA-2020:2067
reference_id RHSA-2020:2067
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2067
11
reference_url https://access.redhat.com/errata/RHSA-2020:2511
reference_id RHSA-2020:2511
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2511
12
reference_url https://access.redhat.com/errata/RHSA-2020:2512
reference_id RHSA-2020:2512
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2512
13
reference_url https://access.redhat.com/errata/RHSA-2020:2513
reference_id RHSA-2020:2513
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2513
14
reference_url https://access.redhat.com/errata/RHSA-2020:2515
reference_id RHSA-2020:2515
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2515
fixed_packages
0
url pkg:maven/io.smallrye.config/smallrye-config@1.6.2
purl pkg:maven/io.smallrye.config/smallrye-config@1.6.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.smallrye.config/smallrye-config@1.6.2
aliases CVE-2020-1729, GHSA-54fx-gm74-q676
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vhk6-ks9x-1kes
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/io.smallrye.config/smallrye-config@1.6.2