Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/symfony/http-kernel@2.0.0
Typecomposer
Namespacesymfony
Namehttp-kernel
Version2.0.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.3.27
Latest_non_vulnerable_version6.2.6
Affected_by_vulnerabilities
0
url VCID-91hk-tdtv-x7fp
vulnerability_id VCID-91hk-tdtv-x7fp
summary 
Duplicate
This advisory duplicates another.
references
0
reference_url https://github.com/symfony/symfony
reference_id
reference_type
scores
url https://github.com/symfony/symfony
1
reference_url https://github.com/symfony/symfony/commit/d2f6322af9444ac5cd1ef3ac6f280dbef7f9d1fb
reference_id
reference_type
scores
url https://github.com/symfony/symfony/commit/d2f6322af9444ac5cd1ef3ac6f280dbef7f9d1fb
2
reference_url https://lists.debian.org/debian-lts-announce/2023/07/msg00014.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2023/07/msg00014.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-24894
reference_id CVE-2022-24894
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-24894
4
reference_url https://symfony.com/cve-2022-24894
reference_id CVE-2022-24894
reference_type
scores
url https://symfony.com/cve-2022-24894
5
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-kernel/CVE-2022-24894.yaml
reference_id CVE-2022-24894.YAML
reference_type
scores
url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-kernel/CVE-2022-24894.yaml
6
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2022-24894.yaml
reference_id CVE-2022-24894.YAML
reference_type
scores
url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2022-24894.yaml
7
reference_url https://github.com/advisories/GHSA-h7vf-5wrv-9fhv
reference_id GHSA-h7vf-5wrv-9fhv
reference_type
scores
url https://github.com/advisories/GHSA-h7vf-5wrv-9fhv
8
reference_url https://github.com/symfony/symfony/security/advisories/GHSA-h7vf-5wrv-9fhv
reference_id GHSA-h7vf-5wrv-9fhv
reference_type
scores
url https://github.com/symfony/symfony/security/advisories/GHSA-h7vf-5wrv-9fhv
fixed_packages
0
url pkg:composer/symfony/http-kernel@4.4.50
purl pkg:composer/symfony/http-kernel@4.4.50
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-kernel@4.4.50
1
url pkg:composer/symfony/http-kernel@5.4.20
purl pkg:composer/symfony/http-kernel@5.4.20
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-kernel@5.4.20
2
url pkg:composer/symfony/http-kernel@6.0.20
purl pkg:composer/symfony/http-kernel@6.0.20
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-kernel@6.0.20
3
url pkg:composer/symfony/http-kernel@6.1.12
purl pkg:composer/symfony/http-kernel@6.1.12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-kernel@6.1.12
4
url pkg:composer/symfony/http-kernel@6.2.6
purl pkg:composer/symfony/http-kernel@6.2.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-kernel@6.2.6
aliases CVE-2022-24894, GHSA-h7vf-5wrv-9fhv, GMS-2023-209, GMS-2023-212
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-91hk-tdtv-x7fp
1
url VCID-hs5u-r1jg-tub5
vulnerability_id VCID-hs5u-r1jg-tub5
summary 
Improper Access Control
Direct access of ESI URLs behind a trusted proxy.
references
0
reference_url https://symfony.com/cve-2014-5245
reference_id CVE-2014-5245
reference_type
scores
url https://symfony.com/cve-2014-5245
fixed_packages
0
url pkg:composer/symfony/http-kernel@2.4.9
purl pkg:composer/symfony/http-kernel@2.4.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mtb5-t6y4-w3eb
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-kernel@2.4.9
1
url pkg:composer/symfony/http-kernel@2.5.4
purl pkg:composer/symfony/http-kernel@2.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mtb5-t6y4-w3eb
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-kernel@2.5.4
aliases CVE-2014-5245
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hs5u-r1jg-tub5
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/symfony/http-kernel@2.0.0