Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:composer/propel/propel@2.0.0-alpha8

Type composer

Namespace propel

Name propel

Version 2.0.0-alpha8

Qualifiers

Subpath

Is_vulnerable false

Next_non_vulnerable_version 2.0.0-alpha8

Latest_non_vulnerable_version 2.0.0-alpha8

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-rmcd-7t8b-tkcy

vulnerability_id VCID-rmcd-7t8b-tkcy

summary

SQL injection with limit() on MySQL
The `limit()` query method is vulnerable to SQL injection with MySQL.

references

reference_url	https://github.com/propelorm/Propel2/commit/4c309e3e5adaba077f54c0fab93c34995d7c9b3d
reference_id
reference_type
scores
url	https://github.com/propelorm/Propel2/commit/4c309e3e5adaba077f54c0fab93c34995d7c9b3d

reference_url	https://github.com/propelorm/Propel2/issues/1463
reference_id
reference_type
scores
url	https://github.com/propelorm/Propel2/issues/1463

fixed_packages

url	pkg:composer/propel/propel@2.0.0-alpha8
purl	pkg:composer/propel/propel@2.0.0-alpha8
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:composer/propel/propel@2.0.0-alpha8

aliases GMS-2018-12

risk_score null

exploitability null

weighted_severity null

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rmcd-7t8b-tkcy

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:composer/propel/propel@2.0.0-alpha8

Package Instance