Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/65480?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/65480?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm@7.0.0", "type": "nuget", "namespace": "", "name": "Microsoft.NETCore.App.Runtime.linux-musl-arm", "version": "7.0.0", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "7.0.7", "latest_non_vulnerable_version": "10.0.4", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/45997?format=api", "vulnerability_id": "VCID-3ptm-b3fw-8ycf", "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n.NET Core and Visual Studio Denial of Service Vulnerability", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-36799.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-36799.json" }, { "reference_url": "https://github.com/dotnet/runtime", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/runtime" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2237317", "reference_id": "2237317", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2237317" }, { "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36799", "reference_id": "CVE-2023-36799", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36799" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36799", "reference_id": "CVE-2023-36799", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36799" }, { "reference_url": "https://github.com/advisories/GHSA-h3hv-63q5-jgpr", "reference_id": "GHSA-h3hv-63q5-jgpr", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-h3hv-63q5-jgpr" }, { "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-h3hv-63q5-jgpr", "reference_id": "GHSA-h3hv-63q5-jgpr", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-h3hv-63q5-jgpr" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5142", "reference_id": "RHSA-2023:5142", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5142" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5143", "reference_id": "RHSA-2023:5143", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5143" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5144", "reference_id": "RHSA-2023:5144", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5144" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5145", "reference_id": "RHSA-2023:5145", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5145" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5146", "reference_id": "RHSA-2023:5146", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5146" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:6242", "reference_id": "RHSA-2023:6242", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:6242" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:6245", "reference_id": "RHSA-2023:6245", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:6245" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:6246", "reference_id": "RHSA-2023:6246", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:6246" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:6247", "reference_id": "RHSA-2023:6247", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:6247" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:6249", "reference_id": "RHSA-2023:6249", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:6249" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/66868?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm@7.0.11", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm@7.0.11" } ], "aliases": [ "CVE-2023-36799", "GHSA-h3hv-63q5-jgpr" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3ptm-b3fw-8ycf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/45368?format=api", "vulnerability_id": "VCID-7pxy-azw1-3uef", "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29331.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29331.json" }, { "reference_url": "https://github.com/dotnet/announcements/issues/257", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/announcements/issues/257" }, { "reference_url": "https://github.com/dotnet/runtime", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/runtime" }, { "reference_url": "https://support.microsoft.com/kb/5025823", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://support.microsoft.com/kb/5025823" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2212617", "reference_id": "2212617", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2212617" }, { "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29331", "reference_id": "CVE-2023-29331", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29331" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29331", "reference_id": "CVE-2023-29331", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29331" }, { "reference_url": "https://github.com/advisories/GHSA-555c-2p6r-68mm", "reference_id": "GHSA-555c-2p6r-68mm", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-555c-2p6r-68mm" }, { "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-555c-2p6r-68mm", "reference_id": "GHSA-555c-2p6r-68mm", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-555c-2p6r-68mm" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3580", "reference_id": "RHSA-2023:3580", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3580" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3581", "reference_id": "RHSA-2023:3581", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3581" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3582", "reference_id": "RHSA-2023:3582", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3582" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3592", "reference_id": "RHSA-2023:3592", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3592" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3593", "reference_id": "RHSA-2023:3593", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3593" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4448", "reference_id": "RHSA-2023:4448", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4448" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4449", "reference_id": "RHSA-2023:4449", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4449" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/65483?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm@7.0.7", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm@7.0.7" } ], "aliases": [ "CVE-2023-29331", "GHSA-555c-2p6r-68mm" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7pxy-azw1-3uef" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54785?format=api", "vulnerability_id": "VCID-8n3f-nwe2-tfh5", "summary": "Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability\nMicrosoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nA Remote Code Execution vulnerability exists in .NET 7.0 and .NET 8.0 where a stack buffer overrun occurs in .NET Double Parse routine.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-30045.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-30045.json" }, { "reference_url": "https://github.com/dotnet/announcements/issues/307", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/announcements/issues/307" }, { "reference_url": "https://github.com/dotnet/runtime", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/runtime" }, { "reference_url": "https://github.com/dotnet/runtime/issues/102206", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/runtime/issues/102206" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20241122-0001", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20241122-0001" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2279695", "reference_id": "2279695", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2279695" }, { "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30045", "reference_id": "CVE-2024-30045", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30045" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30045", "reference_id": "CVE-2024-30045", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30045" }, { "reference_url": "https://github.com/advisories/GHSA-7fcr-8qw6-92fr", "reference_id": "GHSA-7fcr-8qw6-92fr", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-7fcr-8qw6-92fr" }, { "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-7fcr-8qw6-92fr", "reference_id": "GHSA-7fcr-8qw6-92fr", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-7fcr-8qw6-92fr" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2842", "reference_id": "RHSA-2024:2842", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2842" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2843", "reference_id": "RHSA-2024:2843", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2843" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:3340", "reference_id": "RHSA-2024:3340", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:3340" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:3345", "reference_id": "RHSA-2024:3345", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:3345" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/81312?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm@7.0.19", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm@7.0.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/81313?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm@8.0.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm@8.0.5" } ], "aliases": [ "CVE-2024-30045", "GHSA-7fcr-8qw6-92fr" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8n3f-nwe2-tfh5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/45367?format=api", "vulnerability_id": "VCID-qkfu-3ybz-qucf", "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-24936.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-24936.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-24936", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01159", "scoring_system": "epss", "scoring_elements": "0.78922", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-24936" }, { "reference_url": "https://github.com/dotnet/announcements/issues/259", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/announcements/issues/259" }, { "reference_url": "https://github.com/dotnet/runtime", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/runtime" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2192438", "reference_id": "2192438", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2192438" }, { "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936", "reference_id": "CVE-2023-24936", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24936", "reference_id": "CVE-2023-24936", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24936" }, { "reference_url": "https://github.com/advisories/GHSA-jx7q-xxmw-44vf", "reference_id": "GHSA-jx7q-xxmw-44vf", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-jx7q-xxmw-44vf" }, { "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-jx7q-xxmw-44vf", "reference_id": "GHSA-jx7q-xxmw-44vf", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-jx7q-xxmw-44vf" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3580", "reference_id": "RHSA-2023:3580", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3580" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3581", "reference_id": "RHSA-2023:3581", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3581" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3582", "reference_id": "RHSA-2023:3582", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3582" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3592", "reference_id": "RHSA-2023:3592", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3592" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3593", "reference_id": "RHSA-2023:3593", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3593" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/65483?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm@7.0.7", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm@7.0.7" } ], "aliases": [ "CVE-2023-24936", "GHSA-jx7q-xxmw-44vf" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qkfu-3ybz-qucf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/45369?format=api", "vulnerability_id": "VCID-rj2a-dp32-uue2", "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n.NET and Visual Studio Remote Code Execution Vulnerability", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-33128.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-33128.json" }, { "reference_url": "https://github.com/dotnet/announcements/issues/253", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/announcements/issues/253" }, { "reference_url": "https://github.com/dotnet/sdk", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/sdk" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2212618", "reference_id": "2212618", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2212618" }, { "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33128", "reference_id": "CVE-2023-33128", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33128" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33128", "reference_id": "CVE-2023-33128", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33128" }, { "reference_url": "https://github.com/advisories/GHSA-x469-cv7m-77r9", "reference_id": "GHSA-x469-cv7m-77r9", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-x469-cv7m-77r9" }, { "reference_url": "https://github.com/dotnet/sdk/security/advisories/GHSA-x469-cv7m-77r9", "reference_id": "GHSA-x469-cv7m-77r9", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/sdk/security/advisories/GHSA-x469-cv7m-77r9" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3580", "reference_id": "RHSA-2023:3580", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3580" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3581", "reference_id": "RHSA-2023:3581", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3581" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3582", "reference_id": "RHSA-2023:3582", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3582" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3592", "reference_id": "RHSA-2023:3592", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3592" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3593", "reference_id": "RHSA-2023:3593", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3593" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4448", "reference_id": "RHSA-2023:4448", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4448" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4449", "reference_id": "RHSA-2023:4449", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4449" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/65483?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm@7.0.7", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm@7.0.7" } ], "aliases": [ "CVE-2023-33128", "GHSA-x469-cv7m-77r9" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rj2a-dp32-uue2" } ], "fixing_vulnerabilities": [], "risk_score": "4.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm@7.0.0" }