Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:gem/rugged@0.17.0.b6
Typegem
Namespace
Namerugged
Version0.17.0.b6
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version0.28.4
Latest_non_vulnerable_version1.5.0.1
Affected_by_vulnerabilities
0
url VCID-8y4k-3zqe-2qhq
vulnerability_id VCID-8y4k-3zqe-2qhq
summary 
Out-of-bounds Read
In the library libgit2, which is used by pygit2, a remote attacker can send a crafted smart-protocol `ng` packet that lacks a `\0` byte to trigger an out-of-bounds read leading to a DoS.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-15501
reference_id
reference_type
scores
0
value 0.02924
scoring_system epss
scoring_elements 0.86651
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-15501
1
reference_url https://bugzilla.suse.com/show_bug.cgi?id=1104641
reference_id
reference_type
scores
url https://bugzilla.suse.com/show_bug.cgi?id=1104641
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-15501
reference_id CVE-2018-15501
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-15501
fixed_packages
0
url pkg:gem/rugged@0.26.6
purl pkg:gem/rugged@0.26.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ga3v-a4x8-q7b6
1
vulnerability VCID-kyvj-xpn5-5ycy
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.26.6
1
url pkg:gem/rugged@0.27.4
purl pkg:gem/rugged@0.27.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ga3v-a4x8-q7b6
1
vulnerability VCID-kyvj-xpn5-5ycy
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.27.4
aliases CVE-2018-15501
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8y4k-3zqe-2qhq
1
url VCID-ga3v-a4x8-q7b6
vulnerability_id VCID-ga3v-a4x8-q7b6
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-12279
reference_id
reference_type
scores
0
value 0.05164
scoring_system epss
scoring_elements 0.9004
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-12279
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-12279
reference_id CVE-2020-12279
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2020-12279
2
reference_url https://usn.ubuntu.com/6678-1/
reference_id USN-6678-1
reference_type
scores
url https://usn.ubuntu.com/6678-1/
fixed_packages
0
url pkg:gem/rugged@0.28.4
purl pkg:gem/rugged@0.28.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.28.4
aliases CVE-2020-12279, GHSA-589j-mmg9-733v
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ga3v-a4x8-q7b6
2
url VCID-hs8h-kc2q-v7hr
vulnerability_id VCID-hs8h-kc2q-v7hr
summary Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.
references
0
reference_url http://article.gmane.org/gmane.linux.kernel/1853266
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://article.gmane.org/gmane.linux.kernel/1853266
1
reference_url http://git-blame.blogspot.com/2014/12/git-1856-195-205-214-and-221-and.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://git-blame.blogspot.com/2014/12/git-1856-195-205-214-and-221-and.html
2
reference_url http://mercurial.selenic.com/wiki/WhatsNew
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://mercurial.selenic.com/wiki/WhatsNew
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9390
reference_id
reference_type
scores
0
value 0.77155
scoring_system epss
scoring_elements 0.98993
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9390
4
reference_url http://securitytracker.com/id?1031404
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://securitytracker.com/id?1031404
5
reference_url https://github.com/blog/1938-git-client-vulnerability-announced
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/blog/1938-git-client-vulnerability-announced
6
reference_url https://github.com/blog/1938-vulnerability-announced-update-your-git-clients
reference_id
reference_type
scores
url https://github.com/blog/1938-vulnerability-announced-update-your-git-clients
7
reference_url https://github.com/libgit2/libgit2/commit/928429c5c96a701bcbcafacb2421a82602b36915
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/libgit2/libgit2/commit/928429c5c96a701bcbcafacb2421a82602b36915
8
reference_url https://github.com/libgit2/libgit2/releases/tag/v0.21.3
reference_id
reference_type
scores
url https://github.com/libgit2/libgit2/releases/tag/v0.21.3
9
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/mercurial/PYSEC-2020-217.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/mercurial/PYSEC-2020-217.yaml
10
reference_url https://libgit2.org/security
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://libgit2.org/security
11
reference_url https://libgit2.org/security/
reference_id
reference_type
scores
url https://libgit2.org/security/
12
reference_url https://news.ycombinator.com/item?id=8769667
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://news.ycombinator.com/item?id=8769667
13
reference_url https://projects.eclipse.org/projects/technology.jgit/releases/3.5.3
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://projects.eclipse.org/projects/technology.jgit/releases/3.5.3
14
reference_url http://support.apple.com/kb/HT204147
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://support.apple.com/kb/HT204147
15
reference_url https://web.archive.org/web/20211204220400/https://securitytracker.com/id?1031404
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20211204220400/https://securitytracker.com/id?1031404
16
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773640
reference_id 773640
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773640
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774048
reference_id 774048
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774048
18
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774050
reference_id 774050
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774050
19
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-9390
reference_id CVE-2014-9390
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-9390
20
reference_url https://github.com/advisories/GHSA-6vvc-c2m3-cjf3
reference_id GHSA-6vvc-c2m3-cjf3
reference_type
scores
url https://github.com/advisories/GHSA-6vvc-c2m3-cjf3
21
reference_url https://security.gentoo.org/glsa/201509-06
reference_id GLSA-201509-06
reference_type
scores
url https://security.gentoo.org/glsa/201509-06
22
reference_url https://usn.ubuntu.com/2470-1/
reference_id USN-2470-1
reference_type
scores
url https://usn.ubuntu.com/2470-1/
fixed_packages
0
url pkg:gem/rugged@0.21.3
purl pkg:gem/rugged@0.21.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8y4k-3zqe-2qhq
1
vulnerability VCID-ga3v-a4x8-q7b6
2
vulnerability VCID-kyvj-xpn5-5ycy
3
vulnerability VCID-sh5r-zhae-7qau
4
vulnerability VCID-vqs6-suqc-ybc7
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.21.3
1
url pkg:gem/rugged@0.22.0b1
purl pkg:gem/rugged@0.22.0b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8y4k-3zqe-2qhq
1
vulnerability VCID-ga3v-a4x8-q7b6
2
vulnerability VCID-kyvj-xpn5-5ycy
3
vulnerability VCID-sh5r-zhae-7qau
4
vulnerability VCID-vqs6-suqc-ybc7
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.22.0b1
aliases CVE-2014-9390, GHSA-6vvc-c2m3-cjf3, PYSEC-2020-217
risk_score 0.3
exploitability 0.5
weighted_severity 0.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hs8h-kc2q-v7hr
3
url VCID-kyvj-xpn5-5ycy
vulnerability_id VCID-kyvj-xpn5-5ycy
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-12278
reference_id
reference_type
scores
0
value 0.06011
scoring_system epss
scoring_elements 0.90846
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-12278
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-12278
reference_id CVE-2020-12278
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2020-12278
2
reference_url https://usn.ubuntu.com/6678-1/
reference_id USN-6678-1
reference_type
scores
url https://usn.ubuntu.com/6678-1/
fixed_packages
0
url pkg:gem/rugged@0.28.4
purl pkg:gem/rugged@0.28.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.28.4
aliases CVE-2020-12278, GHSA-5wph-8frv-58vj
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kyvj-xpn5-5ycy
4
url VCID-sh5r-zhae-7qau
vulnerability_id VCID-sh5r-zhae-7qau
summary 
Out-of-bounds Read
The libgit2 library, which is used by pygit2, is vulnerable to an integer overflow which leads to an out-of-bound read. An attacker may use this flaw to leak memory addresses or cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-10887
reference_id
reference_type
scores
0
value 0.00392
scoring_system epss
scoring_elements 0.60497
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-10887
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1598021
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1598021
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903509
reference_id 903509
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903509
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-10887
reference_id CVE-2018-10887
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-10887
fixed_packages
0
url pkg:gem/rugged@0.27.4
purl pkg:gem/rugged@0.27.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ga3v-a4x8-q7b6
1
vulnerability VCID-kyvj-xpn5-5ycy
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.27.4
aliases CVE-2018-10887
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sh5r-zhae-7qau
5
url VCID-vqs6-suqc-ybc7
vulnerability_id VCID-vqs6-suqc-ybc7
summary 
Out-of-bounds Read
A flaw was found in libgit2 which is wrapped by the rugged gem. A missing check
in git_delta_apply function in `delta.c` file, may lead to an out-of-bound read while reading a binary delta file. An attacker may use this flaw to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-10888
reference_id
reference_type
scores
0
value 0.0062
scoring_system epss
scoring_elements 0.70373
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-10888
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1598024
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1598024
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903508
reference_id 903508
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903508
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-10888
reference_id CVE-2018-10888
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-10888
fixed_packages
0
url pkg:gem/rugged@0.27.4
purl pkg:gem/rugged@0.27.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ga3v-a4x8-q7b6
1
vulnerability VCID-kyvj-xpn5-5ycy
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.27.4
aliases CVE-2018-10888
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vqs6-suqc-ybc7
Fixing_vulnerabilities
Risk_score0.3
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.17.0.b6