Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:rpm/redhat/eap8-jakarta-servlet-api@6.0.0-6.redhat_00007.1?arch=el8eap
Typerpm
Namespaceredhat
Nameeap8-jakarta-servlet-api
Version6.0.0-6.redhat_00007.1
Qualifiers
arch el8eap
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-qh9g-f6d2-zkeg
vulnerability_id VCID-qh9g-f6d2-zkeg
summary 
Eclipse JGit XML External Entity (XXE) Vulnerability
In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-4949.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-4949.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-4949
reference_id
reference_type
scores
0
value 0.00197
scoring_system epss
scoring_elements 0.41706
published_at 2026-04-18T12:55:00Z
1
value 0.00197
scoring_system epss
scoring_elements 0.41695
published_at 2026-04-02T12:55:00Z
2
value 0.00197
scoring_system epss
scoring_elements 0.41732
published_at 2026-04-16T12:55:00Z
3
value 0.00197
scoring_system epss
scoring_elements 0.41684
published_at 2026-04-13T12:55:00Z
4
value 0.00197
scoring_system epss
scoring_elements 0.41699
published_at 2026-04-12T12:55:00Z
5
value 0.00197
scoring_system epss
scoring_elements 0.41731
published_at 2026-04-11T12:55:00Z
6
value 0.00197
scoring_system epss
scoring_elements 0.41709
published_at 2026-04-09T12:55:00Z
7
value 0.00197
scoring_system epss
scoring_elements 0.417
published_at 2026-04-08T12:55:00Z
8
value 0.00197
scoring_system epss
scoring_elements 0.4165
published_at 2026-04-07T12:55:00Z
9
value 0.00197
scoring_system epss
scoring_elements 0.41722
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-4949
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4949
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4949
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/eclipse-jgit/jgit
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/eclipse-jgit/jgit
5
reference_url https://gitlab.eclipse.org/security/cve-assignement/-/issues/64
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/S:N/AU:Y/R:U/V:D/RE:L/U:Green
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T10:22:48Z/
url https://gitlab.eclipse.org/security/cve-assignement/-/issues/64
6
reference_url https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/S:N/AU:Y/R:U/V:D/RE:L/U:Green
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T10:22:48Z/
url https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-4949
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-4949
8
reference_url https://projects.eclipse.org/projects/technology.jgit/releases/5.13.4
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/S:N/AU:Y/R:U/V:D/RE:L/U:Green
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T10:22:48Z/
url https://projects.eclipse.org/projects/technology.jgit/releases/5.13.4
9
reference_url https://projects.eclipse.org/projects/technology.jgit/releases/5.13.5
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://projects.eclipse.org/projects/technology.jgit/releases/5.13.5
10
reference_url https://projects.eclipse.org/projects/technology.jgit/releases/6.10.1
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/S:N/AU:Y/R:U/V:D/RE:L/U:Green
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T10:22:48Z/
url https://projects.eclipse.org/projects/technology.jgit/releases/6.10.1
11
reference_url https://projects.eclipse.org/projects/technology.jgit/releases/7.0.1
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/S:N/AU:Y/R:U/V:D/RE:L/U:Green
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T10:22:48Z/
url https://projects.eclipse.org/projects/technology.jgit/releases/7.0.1
12
reference_url https://projects.eclipse.org/projects/technology.jgit/releases/7.1.1
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/S:N/AU:Y/R:U/V:D/RE:L/U:Green
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T10:22:48Z/
url https://projects.eclipse.org/projects/technology.jgit/releases/7.1.1
13
reference_url https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/S:N/AU:Y/R:U/V:D/RE:L/U:Green
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T10:22:48Z/
url https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1106287
reference_id 1106287
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1106287
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2367730
reference_id 2367730
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2367730
16
reference_url https://github.com/advisories/GHSA-vrpq-qp53-qv56
reference_id GHSA-vrpq-qp53-qv56
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vrpq-qp53-qv56
17
reference_url https://access.redhat.com/errata/RHSA-2025:18028
reference_id RHSA-2025:18028
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:18028
18
reference_url https://access.redhat.com/errata/RHSA-2025:22187
reference_id RHSA-2025:22187
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:22187
19
reference_url https://access.redhat.com/errata/RHSA-2025:22188
reference_id RHSA-2025:22188
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:22188
20
reference_url https://access.redhat.com/errata/RHSA-2025:22190
reference_id RHSA-2025:22190
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:22190
21
reference_url https://access.redhat.com/errata/RHSA-2025:23482
reference_id RHSA-2025:23482
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23482
22
reference_url https://access.redhat.com/errata/RHSA-2025:23485
reference_id RHSA-2025:23485
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23485
23
reference_url https://access.redhat.com/errata/RHSA-2025:23486
reference_id RHSA-2025:23486
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23486
24
reference_url https://access.redhat.com/errata/RHSA-2025:23487
reference_id RHSA-2025:23487
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23487
25
reference_url https://access.redhat.com/errata/RHSA-2025:23488
reference_id RHSA-2025:23488
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23488
26
reference_url https://access.redhat.com/errata/RHSA-2025:23489
reference_id RHSA-2025:23489
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23489
27
reference_url https://access.redhat.com/errata/RHSA-2025:23490
reference_id RHSA-2025:23490
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23490
28
reference_url https://access.redhat.com/errata/RHSA-2025:23491
reference_id RHSA-2025:23491
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23491
29
reference_url https://access.redhat.com/errata/RHSA-2025:23492
reference_id RHSA-2025:23492
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23492
fixed_packages
aliases CVE-2025-4949, GHSA-vrpq-qp53-qv56
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qh9g-f6d2-zkeg
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-jakarta-servlet-api@6.0.0-6.redhat_00007.1%3Farch=el8eap