Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/zendframework/zendframework@2.3.0-alpha0
Typecomposer
Namespacezendframework
Namezendframework
Version2.3.0-alpha0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.5.2
Latest_non_vulnerable_version2.5.2
Affected_by_vulnerabilities
0
url VCID-6xpr-93ef-27cu
vulnerability_id VCID-6xpr-93ef-27cu
summary 
Improper Authentication
The (1) `Zend_Ldap` class in Zend and (2) `Zend
dap` component in Zend allows remote attackers to bypass authentication via a password starting with a null byte, which triggers an unauthenticated bind.
references
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141070.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141070.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141106.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141106.html
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-8088
reference_id
reference_type
scores
0
value 0.00608
scoring_system epss
scoring_elements 0.70151
published_at 2026-06-06T12:55:00Z
1
value 0.00608
scoring_system epss
scoring_elements 0.70101
published_at 2026-06-04T12:55:00Z
2
value 0.00608
scoring_system epss
scoring_elements 0.70142
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-8088
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2681
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2681
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2682
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2682
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2683
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2683
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2684
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2684
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2685
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4914
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4914
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8088
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8089
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8089
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3154
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3154
12
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/97038
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/97038
13
reference_url https://framework.zend.com/security/advisory/ZF2014-05
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://framework.zend.com/security/advisory/ZF2014-05
14
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/CVE-2014-8088.yaml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/CVE-2014-8088.yaml
15
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/CVE-2014-8088.yaml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/CVE-2014-8088.yaml
16
reference_url https://github.com/zendframework/zendframework
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/zendframework/zendframework
17
reference_url https://github.com/zendframework/zendframework/commit/a4222a6c1dc809f0f32fdafcd1ac4d583a075f2f
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/zendframework/zendframework/commit/a4222a6c1dc809f0f32fdafcd1ac4d583a075f2f
18
reference_url http://www.debian.org/security/2015/dsa-3265
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2015/dsa-3265
19
reference_url http://www.openwall.com/lists/oss-security/2014/10/10/5
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2014/10/10/5
20
reference_url http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
21
reference_url http://www.securityfocus.com/bid/70378
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/70378
22
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-8088
reference_id CVE-2014-8088
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-8088
fixed_packages
0
url pkg:composer/zendframework/zendframework@2.3.3
purl pkg:composer/zendframework/zendframework@2.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2g8z-51nu-17hs
1
vulnerability VCID-3s39-f3q9-33ep
2
vulnerability VCID-5bm4-grk6-w7hk
3
vulnerability VCID-8atm-865q-mkf3
4
vulnerability VCID-8d1t-m4zy-dkf4
5
vulnerability VCID-8fwb-56kb-jubf
6
vulnerability VCID-9z4g-byhj-3fak
7
vulnerability VCID-gdkp-ceya-p7c6
8
vulnerability VCID-njsg-e1w1-9qcy
9
vulnerability VCID-q74z-645k-c7dk
10
vulnerability VCID-qs6q-pjks-euh4
11
vulnerability VCID-vmut-b2y4-rkcp
12
vulnerability VCID-wrkx-jstz-8bhe
13
vulnerability VCID-wz4g-j8zt-ruff
14
vulnerability VCID-zfzg-uw7s-byhp
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/zendframework/zendframework@2.3.3
aliases CVE-2014-8088, GHSA-f6rc-rh43-h8gr
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6xpr-93ef-27cu
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/zendframework/zendframework@2.3.0-alpha0