Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:nuget/Microsoft.NETCore.App@2.1.7
Typenuget
Namespace
NameMicrosoft.NETCore.App
Version2.1.7
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.1.8
Latest_non_vulnerable_version2.2.2
Affected_by_vulnerabilities
0
url VCID-tqnz-1977-83ab
vulnerability_id VCID-tqnz-1977-83ab
summary Microsoft Security Advisory CVE-2019-0657: .NET Core Domain Spoofing Vulnerability
references
0
reference_url https://access.redhat.com/errata/RHSA-2019:0349
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:0349
1
reference_url https://github.com/dotnet/announcements/issues/97
reference_id
reference_type
scores
url https://github.com/dotnet/announcements/issues/97
2
reference_url https://github.com/github/advisory-database/issues/302
reference_id
reference_type
scores
url https://github.com/github/advisory-database/issues/302
3
reference_url http://www.securityfocus.com/bid/106890
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/106890
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-0657
reference_id CVE-2019-0657
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2019-0657
5
reference_url https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0657
reference_id CVE-2019-0657
reference_type
scores
url https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0657
6
reference_url https://github.com/advisories/GHSA-x5qj-9vmx-7g6g
reference_id GHSA-x5qj-9vmx-7g6g
reference_type
scores
url https://github.com/advisories/GHSA-x5qj-9vmx-7g6g
fixed_packages
0
url pkg:nuget/Microsoft.NETCore.App@2.1.8
purl pkg:nuget/Microsoft.NETCore.App@2.1.8
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App@2.1.8
1
url pkg:nuget/Microsoft.NETCore.App@2.2.2
purl pkg:nuget/Microsoft.NETCore.App@2.2.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App@2.2.2
aliases CVE-2019-0657, GHSA-x5qj-9vmx-7g6g
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tqnz-1977-83ab
Fixing_vulnerabilities
0
url VCID-kv27-b4ve-d3ax
vulnerability_id VCID-kv27-b4ve-d3ax
summary Microsoft Security Advisory CVE-2018-8416: .NET Core Tampering Vulnerability
references
0
reference_url https://access.redhat.com/errata/RHSA-2018:3676
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3676
1
reference_url https://github.com/dotnet/announcements/issues/95
reference_id
reference_type
scores
url https://github.com/dotnet/announcements/issues/95
2
reference_url https://github.com/github/advisory-database/issues/302
reference_id
reference_type
scores
url https://github.com/github/advisory-database/issues/302
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-8416
reference_id CVE-2018-8416
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-8416
4
reference_url https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8416
reference_id CVE-2018-8416
reference_type
scores
url https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8416
5
reference_url https://github.com/advisories/GHSA-5633-f33j-c6f7
reference_id GHSA-5633-f33j-c6f7
reference_type
scores
url https://github.com/advisories/GHSA-5633-f33j-c6f7
fixed_packages
0
url pkg:nuget/Microsoft.NETCore.App@2.1.7
purl pkg:nuget/Microsoft.NETCore.App@2.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-tqnz-1977-83ab
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App@2.1.7
aliases CVE-2018-8416, GHSA-5633-f33j-c6f7
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kv27-b4ve-d3ax
1
url VCID-v6vu-9ybt-tqbc
vulnerability_id VCID-v6vu-9ybt-tqbc
summary Microsoft Security Advisory CVE-2019-0564: ASP.NET Core Denial of Service Vulnerability
references
0
reference_url https://access.redhat.com/errata/RHSA-2019:0040
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:0040
1
reference_url https://github.com/aspnet/Announcements/issues/334
reference_id
reference_type
scores
url https://github.com/aspnet/Announcements/issues/334
2
reference_url https://github.com/github/advisory-database/issues/302
reference_id
reference_type
scores
url https://github.com/github/advisory-database/issues/302
3
reference_url http://www.securityfocus.com/bid/106413
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/106413
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-0564
reference_id CVE-2019-0564
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2019-0564
5
reference_url https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0564
reference_id CVE-2019-0564
reference_type
scores
url https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0564
6
reference_url https://github.com/advisories/GHSA-6px8-22w5-w334
reference_id GHSA-6px8-22w5-w334
reference_type
scores
url https://github.com/advisories/GHSA-6px8-22w5-w334
fixed_packages
0
url pkg:nuget/Microsoft.NETCore.App@2.1.7
purl pkg:nuget/Microsoft.NETCore.App@2.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-tqnz-1977-83ab
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App@2.1.7
1
url pkg:nuget/Microsoft.NETCore.App@2.2.1
purl pkg:nuget/Microsoft.NETCore.App@2.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-tqnz-1977-83ab
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App@2.2.1
aliases CVE-2019-0564, GHSA-6px8-22w5-w334
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v6vu-9ybt-tqbc
2
url VCID-w3wn-4q3j-pfaz
vulnerability_id VCID-w3wn-4q3j-pfaz
summary 
Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2.
references
0
reference_url https://access.redhat.com/errata/RHSA-2019:0040
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:0040
1
reference_url https://github.com/dotnet/announcements/issues/94
reference_id
reference_type
scores
url https://github.com/dotnet/announcements/issues/94
2
reference_url http://www.securityfocus.com/bid/106405
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/106405
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-0545
reference_id CVE-2019-0545
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2019-0545
4
reference_url https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0545
reference_id CVE-2019-0545
reference_type
scores
url https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0545
5
reference_url https://github.com/advisories/GHSA-2xjx-v99w-gqf3
reference_id GHSA-2xjx-v99w-gqf3
reference_type
scores
url https://github.com/advisories/GHSA-2xjx-v99w-gqf3
fixed_packages
0
url pkg:nuget/Microsoft.NETCore.App@2.1.7
purl pkg:nuget/Microsoft.NETCore.App@2.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-tqnz-1977-83ab
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App@2.1.7
1
url pkg:nuget/Microsoft.NETCore.App@2.2.1
purl pkg:nuget/Microsoft.NETCore.App@2.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-tqnz-1977-83ab
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App@2.2.1
aliases CVE-2019-0545, GHSA-2xjx-v99w-gqf3
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w3wn-4q3j-pfaz
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App@2.1.7