Lookup for vulnerable packages by Package URL.

Purlpkg:composer/yiisoft/yii2-gii@2.0.4
Typecomposer
Namespaceyiisoft
Nameyii2-gii
Version2.0.4
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version2.0.4
Latest_non_vulnerable_version2.2.2
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-hhby-y7fg-tqax
vulnerability_id VCID-hhby-y7fg-tqax
summary
Cross-site Scripting
Cross-site scripting (XSS) vulnerability in Yii Framework allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON, arrays, and Internet Explorer 6
references
0
reference_url https://www.yiiframework.com/news/86/yii-2-0-4-is-released/
reference_id
reference_type
scores
url https://www.yiiframework.com/news/86/yii-2-0-4-is-released/
fixed_packages
0
url pkg:composer/yiisoft/yii2-gii@2.0.4
purl pkg:composer/yiisoft/yii2-gii@2.0.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/yiisoft/yii2-gii@2.0.4
aliases CVE-2015-3397
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hhby-y7fg-tqax
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/yiisoft/yii2-gii@2.0.4