Package Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/61455?format=api",
    "purl": "pkg:composer/typo3/cms-install@4.3.4",
    "type": "composer",
    "namespace": "typo3",
    "name": "cms-install",
    "version": "4.3.4",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": false,
    "next_non_vulnerable_version": "4.4.1",
    "latest_non_vulnerable_version": "12.4.8",
    "affected_by_vulnerabilities": [],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42948?format=api",
            "vulnerability_id": "VCID-jv8p-qvwg-k3eq",
            "summary": "Session Fixation\nTYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 is open to a session fixation attack which allows remote attackers to hijack a victim's session.",
            "references": [
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719"
                },
                {
                    "reference_url": "https://github.com/TYPO3/typo3/commit/199cc2d53747d76657d7aab612c6b3f728d0f15d",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/TYPO3/typo3/commit/199cc2d53747d76657d7aab612c6b3f728d0f15d"
                },
                {
                    "reference_url": "https://github.com/TYPO3/typo3/commit/1d649976e1f1bda684cdc7120e9f74a543059181",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/TYPO3/typo3/commit/1d649976e1f1bda684cdc7120e9f74a543059181"
                },
                {
                    "reference_url": "https://github.com/TYPO3/typo3/commit/d3577c8e2c49122c4ab5955c70688ee441d06f23",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/TYPO3/typo3/commit/d3577c8e2c49122c4ab5955c70688ee441d06f23"
                },
                {
                    "reference_url": "https://github.com/TYPO3/typo3/commit/ef3676281b0346644041a93fcbaa7bd9844bbbc5",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/TYPO3/typo3/commit/ef3676281b0346644041a93fcbaa7bd9844bbbc5"
                },
                {
                    "reference_url": "https://typo3.org/security/advisory/typo3-sa-2010-012/#Broken_Authentication_and_Session_Management",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://typo3.org/security/advisory/typo3-sa-2010-012/#Broken_Authentication_and_Session_Management"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3671",
                    "reference_id": "CVE-2010-3671",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3671"
                },
                {
                    "reference_url": "https://security-tracker.debian.org/tracker/CVE-2010-3671",
                    "reference_id": "CVE-2010-3671",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security-tracker.debian.org/tracker/CVE-2010-3671"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-gqmh-5xmq-3fhg",
                    "reference_id": "GHSA-gqmh-5xmq-3fhg",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-gqmh-5xmq-3fhg"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/61453?format=api",
                    "purl": "pkg:composer/typo3/cms-install@4.1.14",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-install@4.1.14"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/61454?format=api",
                    "purl": "pkg:composer/typo3/cms-install@4.2.13",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-install@4.2.13"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/61455?format=api",
                    "purl": "pkg:composer/typo3/cms-install@4.3.4",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-install@4.3.4"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/61456?format=api",
                    "purl": "pkg:composer/typo3/cms-install@4.4.1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-install@4.4.1"
                }
            ],
            "aliases": [
                "CVE-2010-3671",
                "GHSA-gqmh-5xmq-3fhg"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jv8p-qvwg-k3eq"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42950?format=api",
            "vulnerability_id": "VCID-spfb-gnjs-97cq",
            "summary": "Use of Insufficiently Random Values\nTYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness in the uniqid function.",
            "references": [
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719"
                },
                {
                    "reference_url": "https://github.com/TYPO3/typo3/commit/302b35e714ca30ddb71ab36b9cbb2bea760a2f0e",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/TYPO3/typo3/commit/302b35e714ca30ddb71ab36b9cbb2bea760a2f0e"
                },
                {
                    "reference_url": "https://github.com/TYPO3/typo3/commit/352d6066bf09137e86705bc060fd4ab3ba8f9191",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/TYPO3/typo3/commit/352d6066bf09137e86705bc060fd4ab3ba8f9191"
                },
                {
                    "reference_url": "https://github.com/TYPO3/typo3/commit/42324b30546b1e49fb16c916fc71cceb99ad9fd0",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/TYPO3/typo3/commit/42324b30546b1e49fb16c916fc71cceb99ad9fd0"
                },
                {
                    "reference_url": "https://github.com/TYPO3/typo3/commit/f6d2e33cfab87c9e44eca275d6755be747e3cd7e",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/TYPO3/typo3/commit/f6d2e33cfab87c9e44eca275d6755be747e3cd7e"
                },
                {
                    "reference_url": "https://typo3.org/security/advisory/typo3-sa-2010-012/#Insecure_Randomness",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://typo3.org/security/advisory/typo3-sa-2010-012/#Insecure_Randomness"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3666",
                    "reference_id": "CVE-2010-3666",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3666"
                },
                {
                    "reference_url": "https://security-tracker.debian.org/tracker/CVE-2010-3666",
                    "reference_id": "CVE-2010-3666",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security-tracker.debian.org/tracker/CVE-2010-3666"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-c7xr-736p-29j3",
                    "reference_id": "GHSA-c7xr-736p-29j3",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-c7xr-736p-29j3"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/61453?format=api",
                    "purl": "pkg:composer/typo3/cms-install@4.1.14",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-install@4.1.14"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/61454?format=api",
                    "purl": "pkg:composer/typo3/cms-install@4.2.13",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-install@4.2.13"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/61455?format=api",
                    "purl": "pkg:composer/typo3/cms-install@4.3.4",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-install@4.3.4"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/61456?format=api",
                    "purl": "pkg:composer/typo3/cms-install@4.4.1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-install@4.4.1"
                }
            ],
            "aliases": [
                "CVE-2010-3666",
                "GHSA-c7xr-736p-29j3"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-spfb-gnjs-97cq"
        }
    ],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-install@4.3.4"
}