Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/silverstripe/framework@3.0.0
Typecomposer
Namespacesilverstripe
Nameframework
Version3.0.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.0.14
Latest_non_vulnerable_version5.1.11
Affected_by_vulnerabilities
0
url VCID-1mmc-91gk-r3d3
vulnerability_id VCID-1mmc-91gk-r3d3
summary SilverStripe allowss Reflected SQL Injection through Form and `DataObject`.
references
0
reference_url https://www.silverstripe.org/download/security-releases/ss-2018-021
reference_id
reference_type
scores
url https://www.silverstripe.org/download/security-releases/ss-2018-021
fixed_packages
0
url pkg:composer/silverstripe/framework@3.6.7
purl pkg:composer/silverstripe/framework@3.6.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.6.7
1
url pkg:composer/silverstripe/framework@3.7.3
purl pkg:composer/silverstripe/framework@3.7.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.7.3
2
url pkg:composer/silverstripe/framework@4.0.7
purl pkg:composer/silverstripe/framework@4.0.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.7
3
url pkg:composer/silverstripe/framework@4.1.5
purl pkg:composer/silverstripe/framework@4.1.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.1.5
4
url pkg:composer/silverstripe/framework@4.2.4
purl pkg:composer/silverstripe/framework@4.2.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.2.4
5
url pkg:composer/silverstripe/framework@4.3.1
purl pkg:composer/silverstripe/framework@4.3.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.3.1
aliases CVE-2019-5715
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1mmc-91gk-r3d3
1
url VCID-3snr-vtda-jqdj
vulnerability_id VCID-3snr-vtda-jqdj
summary 
Cross-site Scripting
XSS In rewritten hash links.
references
0
reference_url https://www.silverstripe.org/software/download/security-releases/ss-2015-009-xss-in-rewritten-hash-links/
reference_id
reference_type
scores
url https://www.silverstripe.org/software/download/security-releases/ss-2015-009-xss-in-rewritten-hash-links/
fixed_packages
0
url pkg:composer/silverstripe/framework@3.0.13
purl pkg:composer/silverstripe/framework@3.0.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-78b6-1v3w-qfc3
1
vulnerability VCID-uyxp-7fh1-77cg
2
vulnerability VCID-wmfv-vtnz-bkad
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.0.13
1
url pkg:composer/silverstripe/framework@3.1.12
purl pkg:composer/silverstripe/framework@3.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-78b6-1v3w-qfc3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.1.12
aliases SS-2015-009-1
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3snr-vtda-jqdj
2
url VCID-78b6-1v3w-qfc3
vulnerability_id VCID-78b6-1v3w-qfc3
summary 
URL Redirection to Untrusted Site (Open Redirect)
External redirection risk in `Security?ReturnURL`.
references
0
reference_url https://www.silverstripe.org/software/download/security-releases/ss-2015-012/
reference_id
reference_type
scores
url https://www.silverstripe.org/software/download/security-releases/ss-2015-012/
fixed_packages
0
url pkg:composer/silverstripe/framework@3.0.14
purl pkg:composer/silverstripe/framework@3.0.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.0.14
1
url pkg:composer/silverstripe/framework@3.1.13
purl pkg:composer/silverstripe/framework@3.1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sfyd-qn7r-eqdg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.1.13
aliases SS-2015-012-1
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-78b6-1v3w-qfc3
3
url VCID-8xwp-xd3k-fqaz
vulnerability_id VCID-8xwp-xd3k-fqaz
summary 
IE requests issue
IE requests not properly behaving with `rewritehashlinks`.
references
0
reference_url https://www.silverstripe.org/software/download/security-releases/ss-2014-015-ie-requests-not-properly-behaving-with-rewritehashlinks/
reference_id
reference_type
scores
url https://www.silverstripe.org/software/download/security-releases/ss-2014-015-ie-requests-not-properly-behaving-with-rewritehashlinks/
fixed_packages
0
url pkg:composer/silverstripe/framework@3.0.13
purl pkg:composer/silverstripe/framework@3.0.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-78b6-1v3w-qfc3
1
vulnerability VCID-uyxp-7fh1-77cg
2
vulnerability VCID-wmfv-vtnz-bkad
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.0.13
1
url pkg:composer/silverstripe/framework@3.1.12
purl pkg:composer/silverstripe/framework@3.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-78b6-1v3w-qfc3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.1.12
aliases SS-2014-015-1
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8xwp-xd3k-fqaz
4
url VCID-nu3h-nb1g-67bs
vulnerability_id VCID-nu3h-nb1g-67bs
summary 
Improper Input Validation
`HtmlEditor` improper URL sanitisation.
references
0
reference_url https://www.silverstripe.org/download/security-releases/ss-2015-027/
reference_id
reference_type
scores
url https://www.silverstripe.org/download/security-releases/ss-2015-027/
fixed_packages
0
url pkg:composer/silverstripe/framework@3.2.1
purl pkg:composer/silverstripe/framework@3.2.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.2.1
aliases SS-2015-027-1
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nu3h-nb1g-67bs
5
url VCID-sg62-98yy-2kd7
vulnerability_id VCID-sg62-98yy-2kd7
summary 
Incorrect Authorization
Default SilverStripe GraphQL Server (aka silverstripe/graphql) permission checker is not inherited by query subclass.
references
0
reference_url https://github.com/silverstripe/silverstripe-graphql/pull/407/commits/16961459f681f7b32145296189dfdbcc7715e6ed
reference_id
reference_type
scores
url https://github.com/silverstripe/silverstripe-graphql/pull/407/commits/16961459f681f7b32145296189dfdbcc7715e6ed
1
reference_url https://github.com/silverstripe/silverstripe-graphql/releases
reference_id
reference_type
scores
url https://github.com/silverstripe/silverstripe-graphql/releases
2
reference_url https://github.com/silverstripe/silverstripe-graphql/releases/tag/3.5.2
reference_id
reference_type
scores
url https://github.com/silverstripe/silverstripe-graphql/releases/tag/3.5.2
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-28661
reference_id CVE-2021-28661
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-28661
4
reference_url https://www.silverstripe.org/download/security-releases/CVE-2021-28661
reference_id CVE-2021-28661
reference_type
scores
url https://www.silverstripe.org/download/security-releases/CVE-2021-28661
5
reference_url https://github.com/advisories/GHSA-r7rh-g777-g5gx
reference_id GHSA-r7rh-g777-g5gx
reference_type
scores
url https://github.com/advisories/GHSA-r7rh-g777-g5gx
fixed_packages
0
url pkg:composer/silverstripe/framework@3.5.2
purl pkg:composer/silverstripe/framework@3.5.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.5.2
aliases CVE-2021-28661, GHSA-r7rh-g777-g5gx
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sg62-98yy-2kd7
6
url VCID-uyxp-7fh1-77cg
vulnerability_id VCID-uyxp-7fh1-77cg
summary 
Code Injection
Vulnerability on `isDev`, `isTest` and `flush` `$_GET` validation.
references
0
reference_url https://www.silverstripe.org/software/download/security-releases/ss-2015-014/
reference_id
reference_type
scores
url https://www.silverstripe.org/software/download/security-releases/ss-2015-014/
fixed_packages
0
url pkg:composer/silverstripe/framework@3.0.14
purl pkg:composer/silverstripe/framework@3.0.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.0.14
1
url pkg:composer/silverstripe/framework@3.1.13
purl pkg:composer/silverstripe/framework@3.1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sfyd-qn7r-eqdg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.1.13
aliases SS-2015-014-1
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uyxp-7fh1-77cg
7
url VCID-wmfv-vtnz-bkad
vulnerability_id VCID-wmfv-vtnz-bkad
summary Potential SQL Injection Vulnerability in silverstripe.
references
0
reference_url https://www.silverstripe.org/software/download/security-releases/ss-2015-011/
reference_id
reference_type
scores
url https://www.silverstripe.org/software/download/security-releases/ss-2015-011/
fixed_packages
0
url pkg:composer/silverstripe/framework@3.0.14
purl pkg:composer/silverstripe/framework@3.0.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.0.14
1
url pkg:composer/silverstripe/framework@3.1.13
purl pkg:composer/silverstripe/framework@3.1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sfyd-qn7r-eqdg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.1.13
aliases SS-2015-011-1
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wmfv-vtnz-bkad
8
url VCID-yfuu-th6b-nba4
vulnerability_id VCID-yfuu-th6b-nba4
summary 
Cross-site Scripting
Form field validation message XSS vulnerability.
references
0
reference_url https://www.silverstripe.org/download/security-releases/ss-2015-026/
reference_id
reference_type
scores
url https://www.silverstripe.org/download/security-releases/ss-2015-026/
fixed_packages
0
url pkg:composer/silverstripe/framework@3.2.1
purl pkg:composer/silverstripe/framework@3.2.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.2.1
aliases SS-2015-026-1
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yfuu-th6b-nba4
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.0.0