Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:cargo/h2@0.3.24

Type cargo

Namespace

Name h2

Version 0.3.24

Qualifiers

Subpath

Is_vulnerable false

Next_non_vulnerable_version 0.3.24

Latest_non_vulnerable_version 0.4.4

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-uxja-62es-e7dk

vulnerability_id VCID-uxja-62es-e7dk

summary Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)

references

reference_url	https://github.com/hyperium/h2/commit/59570e11ccddbec85f67a0c7aa353f7730c68854
reference_id
reference_type
scores
url	https://github.com/hyperium/h2/commit/59570e11ccddbec85f67a0c7aa353f7730c68854

reference_url	https://github.com/hyperium/h2/commit/d919cd6fd8e0f4f5d1f6282fab0b38a1b4bf999c
reference_id
reference_type
scores
url	https://github.com/hyperium/h2/commit/d919cd6fd8e0f4f5d1f6282fab0b38a1b4bf999c

reference_url	https://github.com/hyperium/h2/pull/737
reference_id
reference_type
scores
url	https://github.com/hyperium/h2/pull/737

reference_url	https://rustsec.org/advisories/RUSTSEC-2024-0003.html
reference_id
reference_type
scores
url	https://rustsec.org/advisories/RUSTSEC-2024-0003.html

reference_url

reference_id

GHSA-8r5v-vm4m-4g25

reference_type

scores

url

fixed_packages

url	pkg:cargo/h2@0.3.24
purl	pkg:cargo/h2@0.3.24
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:cargo/h2@0.3.24

url	pkg:cargo/h2@0.4.2
purl	pkg:cargo/h2@0.4.2
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:cargo/h2@0.4.2

aliases GHSA-8r5v-vm4m-4g25

risk_score null

exploitability null

weighted_severity null

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uxja-62es-e7dk

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:cargo/h2@0.3.24

Package Instance