Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/html5lib@0.9
Typepypi
Namespace
Namehtml5lib
Version0.9
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version0.999999999
Latest_non_vulnerable_version0.999999999
Affected_by_vulnerabilities
0
url VCID-hks7-63m9-cbgq
vulnerability_id VCID-hks7-63m9-cbgq
summary The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of the < (less than) character in attribute values.
references
0
reference_url https://github.com/advisories/GHSA-v9v9-xffq-rwr4
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-v9v9-xffq-rwr4
1
reference_url https://github.com/html5lib/html5lib-python/commit/9b8d8eb5afbc066b7fac9390f5ec75e5e8a7cab7
reference_id
reference_type
scores
url https://github.com/html5lib/html5lib-python/commit/9b8d8eb5afbc066b7fac9390f5ec75e5e8a7cab7
2
reference_url https://github.com/html5lib/html5lib-python/issues/11
reference_id
reference_type
scores
url https://github.com/html5lib/html5lib-python/issues/11
3
reference_url https://github.com/html5lib/html5lib-python/issues/12
reference_id
reference_type
scores
url https://github.com/html5lib/html5lib-python/issues/12
4
reference_url https://html5lib.readthedocs.io/en/latest/changes.html#b9
reference_id
reference_type
scores
url https://html5lib.readthedocs.io/en/latest/changes.html#b9
5
reference_url http://www.openwall.com/lists/oss-security/2016/12/06/5
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/12/06/5
6
reference_url http://www.openwall.com/lists/oss-security/2016/12/08/8
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/12/08/8
7
reference_url http://www.securityfocus.com/bid/95132
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/95132
fixed_packages
0
url pkg:pypi/html5lib@0.999999999
purl pkg:pypi/html5lib@0.999999999
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/html5lib@0.999999999
aliases CVE-2016-9909, GHSA-v9v9-xffq-rwr4, PYSEC-2017-14
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hks7-63m9-cbgq
1
url VCID-xdme-w78p-pkbb
vulnerability_id VCID-xdme-w78p-pkbb
summary The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909.
references
0
reference_url https://github.com/advisories/GHSA-8f6m-gfq9-g33v
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-8f6m-gfq9-g33v
1
reference_url https://github.com/html5lib/html5lib-python/commit/9b8d8eb5afbc066b7fac9390f5ec75e5e8a7cab7
reference_id
reference_type
scores
url https://github.com/html5lib/html5lib-python/commit/9b8d8eb5afbc066b7fac9390f5ec75e5e8a7cab7
2
reference_url https://github.com/html5lib/html5lib-python/issues/11
reference_id
reference_type
scores
url https://github.com/html5lib/html5lib-python/issues/11
3
reference_url https://github.com/html5lib/html5lib-python/issues/12
reference_id
reference_type
scores
url https://github.com/html5lib/html5lib-python/issues/12
4
reference_url https://html5lib.readthedocs.io/en/latest/changes.html#b9
reference_id
reference_type
scores
url https://html5lib.readthedocs.io/en/latest/changes.html#b9
5
reference_url http://www.openwall.com/lists/oss-security/2016/12/06/5
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/12/06/5
6
reference_url http://www.openwall.com/lists/oss-security/2016/12/08/8
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/12/08/8
7
reference_url http://www.securityfocus.com/bid/95132
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/95132
fixed_packages
0
url pkg:pypi/html5lib@0.999999999
purl pkg:pypi/html5lib@0.999999999
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/html5lib@0.999999999
aliases CVE-2016-9910, GHSA-8f6m-gfq9-g33v, PYSEC-2017-15
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xdme-w78p-pkbb
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/html5lib@0.9