Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-sns8-17hs-vugu

Summary

Improper Input Validation
`Hash#slice` in `lib/i18n/core_ext/hash.rb` in the i18n gem for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where `:some_key` is present in `keep_keys` but not present in the hash.

Aliases

alias	CVE-2014-10077

alias	GHSA-34hf-g744-jw64

Fixed_packages

url	pkg:deb/debian/ruby-i18n@0.7.0-3?distro=trixie
purl	pkg:deb/debian/ruby-i18n@0.7.0-3?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-i18n@0.7.0-3%3Fdistro=trixie

url	pkg:deb/debian/ruby-i18n@1.5.3-1%2Bdeb10u1
purl	pkg:deb/debian/ruby-i18n@1.5.3-1%2Bdeb10u1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-i18n@1.5.3-1%252Bdeb10u1

url	pkg:deb/debian/ruby-i18n@1.8.8-1?distro=trixie
purl	pkg:deb/debian/ruby-i18n@1.8.8-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-i18n@1.8.8-1%3Fdistro=trixie

url	pkg:deb/debian/ruby-i18n@1.10.0-2?distro=trixie
purl	pkg:deb/debian/ruby-i18n@1.10.0-2?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-i18n@1.10.0-2%3Fdistro=trixie

url	pkg:deb/debian/ruby-i18n@1.14.7-1?distro=trixie
purl	pkg:deb/debian/ruby-i18n@1.14.7-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-i18n@1.14.7-1%3Fdistro=trixie

url	pkg:deb/debian/ruby-i18n@1.14.8-1?distro=trixie
purl	pkg:deb/debian/ruby-i18n@1.14.8-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-i18n@1.14.8-1%3Fdistro=trixie

url	pkg:gem/i18n@0.8.0
purl	pkg:gem/i18n@0.8.0
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.8.0

url pkg:nuget/i18n@1.0.0

purl pkg:nuget/i18n@1.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-p4mn-btwb-q7cm

resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/i18n@1.0.0

Affected_packages

url pkg:deb/debian/ruby-i18n@0.6.0-3%2Bdeb7u1

purl pkg:deb/debian/ruby-i18n@0.6.0-3%2Bdeb7u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-i18n@0.6.0-3%252Bdeb7u1

url pkg:deb/debian/ruby-i18n@0.6.9-1~bpo70%2B1

purl pkg:deb/debian/ruby-i18n@0.6.9-1~bpo70%2B1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-i18n@0.6.9-1~bpo70%252B1

url pkg:deb/debian/ruby-i18n@0.6.9-2

purl pkg:deb/debian/ruby-i18n@0.6.9-2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-i18n@0.6.9-2

url pkg:deb/debian/ruby-i18n@0.7.0-2%2Bdeb9u1

purl pkg:deb/debian/ruby-i18n@0.7.0-2%2Bdeb9u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-i18n@0.7.0-2%252Bdeb9u1

url pkg:gem/i18n@0.1.0

purl pkg:gem/i18n@0.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.1.0

url pkg:gem/i18n@0.2.0

purl pkg:gem/i18n@0.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.2.0

url pkg:gem/i18n@0.2.1

purl pkg:gem/i18n@0.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.2.1

url pkg:gem/i18n@0.3.0

purl pkg:gem/i18n@0.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.3.0

url pkg:gem/i18n@0.3.1

purl pkg:gem/i18n@0.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.3.1

url pkg:gem/i18n@0.3.2

purl pkg:gem/i18n@0.3.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.3.2

url pkg:gem/i18n@0.3.3

purl pkg:gem/i18n@0.3.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.3.3

url pkg:gem/i18n@0.3.4

purl pkg:gem/i18n@0.3.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.3.4

url pkg:gem/i18n@0.3.5

purl pkg:gem/i18n@0.3.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.3.5

url pkg:gem/i18n@0.3.6.pre

purl pkg:gem/i18n@0.3.6.pre

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.3.6.pre

url pkg:gem/i18n@0.3.6

purl pkg:gem/i18n@0.3.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.3.6

url pkg:gem/i18n@0.3.7

purl pkg:gem/i18n@0.3.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.3.7

url pkg:gem/i18n@0.4.0.beta

purl pkg:gem/i18n@0.4.0.beta

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.4.0.beta

url pkg:gem/i18n@0.4.0.beta1

purl pkg:gem/i18n@0.4.0.beta1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.4.0.beta1

url pkg:gem/i18n@0.4.0

purl pkg:gem/i18n@0.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.4.0

url pkg:gem/i18n@0.4.1

purl pkg:gem/i18n@0.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.4.1

url pkg:gem/i18n@0.4.2

purl pkg:gem/i18n@0.4.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.4.2

url pkg:gem/i18n@0.5.0beta1

purl pkg:gem/i18n@0.5.0beta1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.5.0beta1

url pkg:gem/i18n@0.5.0beta2

purl pkg:gem/i18n@0.5.0beta2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.5.0beta2

url pkg:gem/i18n@0.5.0beta3

purl pkg:gem/i18n@0.5.0beta3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.5.0beta3

url pkg:gem/i18n@0.5.0

purl pkg:gem/i18n@0.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.5.0

url pkg:gem/i18n@0.5.2

purl pkg:gem/i18n@0.5.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.5.2

url pkg:gem/i18n@0.5.3

purl pkg:gem/i18n@0.5.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.5.3

url pkg:gem/i18n@0.5.4

purl pkg:gem/i18n@0.5.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.5.4

url pkg:gem/i18n@0.6.0beta1

purl pkg:gem/i18n@0.6.0beta1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.6.0beta1

url pkg:gem/i18n@0.6.0

purl pkg:gem/i18n@0.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.6.0

url pkg:gem/i18n@0.6.1

purl pkg:gem/i18n@0.6.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.6.1

url pkg:gem/i18n@0.6.2

purl pkg:gem/i18n@0.6.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.6.2

url pkg:gem/i18n@0.6.3

purl pkg:gem/i18n@0.6.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.6.3

url pkg:gem/i18n@0.6.4

purl pkg:gem/i18n@0.6.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.6.4

url pkg:gem/i18n@0.6.5

purl pkg:gem/i18n@0.6.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-65ha-wgr4-eqd4

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.6.5

url pkg:gem/i18n@0.6.8

purl pkg:gem/i18n@0.6.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.6.8

url pkg:gem/i18n@0.6.9

purl pkg:gem/i18n@0.6.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.6.9

url pkg:gem/i18n@0.6.11

purl pkg:gem/i18n@0.6.11

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.6.11

url pkg:gem/i18n@0.7.0.beta1

purl pkg:gem/i18n@0.7.0.beta1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.7.0.beta1

url pkg:gem/i18n@0.7.0

purl pkg:gem/i18n@0.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.7.0

url pkg:gem/i18n@0.8.0.beta1

purl pkg:gem/i18n@0.8.0.beta1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-sns8-17hs-vugu

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/i18n@0.8.0.beta1

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10077.json

reference_id

reference_type

scores

value	5.3
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10077.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2014-10077

reference_id

reference_type

scores

value	0.01306
scoring_system	epss
scoring_elements	0.79798
published_at	2026-04-18T12:55:00Z

value	0.01306
scoring_system	epss
scoring_elements	0.79769
published_at	2026-04-13T12:55:00Z

value	0.01306
scoring_system	epss
scoring_elements	0.79796
published_at	2026-04-16T12:55:00Z

value	0.01306
scoring_system	epss
scoring_elements	0.79721
published_at	2026-04-01T12:55:00Z

value	0.01306
scoring_system	epss
scoring_elements	0.79728
published_at	2026-04-02T12:55:00Z

value	0.01306
scoring_system	epss
scoring_elements	0.7975
published_at	2026-04-04T12:55:00Z

value	0.01306
scoring_system	epss
scoring_elements	0.79735
published_at	2026-04-07T12:55:00Z

value	0.01306
scoring_system	epss
scoring_elements	0.79764
published_at	2026-04-08T12:55:00Z

value	0.01306
scoring_system	epss
scoring_elements	0.79771
published_at	2026-04-09T12:55:00Z

value	0.01306
scoring_system	epss
scoring_elements	0.79793
published_at	2026-04-11T12:55:00Z

value	0.01306
scoring_system	epss
scoring_elements	0.79777
published_at	2026-04-12T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2014-10077

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-10077
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-10077

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	3.3
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url

https://github.com/ruby-i18n/i18n/pull/250/commits/08293a41b34e93824563ca0f5b9b97e7451b6387

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/ruby-i18n/i18n/pull/250/commits/08293a41b34e93824563ca0f5b9b97e7451b6387

reference_url

https://github.com/rubysec/ruby-advisory-db/blob/master/gems/i18n/CVE-2014-10077.yml

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/rubysec/ruby-advisory-db/blob/master/gems/i18n/CVE-2014-10077.yml

reference_url

https://github.com/rubysec/ruby-advisory-db/pull/182/files

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/rubysec/ruby-advisory-db/pull/182/files

reference_url

https://github.com/svenfuchs/i18n

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/svenfuchs/i18n

reference_url

https://github.com/svenfuchs/i18n/pull/289

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3
scoring_elements

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/svenfuchs/i18n/pull/289

reference_url

https://github.com/svenfuchs/i18n/releases/tag/v0.8.0

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/svenfuchs/i18n/releases/tag/v0.8.0

reference_url

https://lists.debian.org/debian-lts-announce/2018/11/msg00021.html

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.debian.org/debian-lts-announce/2018/11/msg00021.html

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1647431
reference_id	1647431
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1647431

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=913093
reference_id	913093
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=913093

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2014-10077

reference_id

CVE-2014-10077

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2014-10077

reference_url

https://github.com/advisories/GHSA-34hf-g744-jw64

reference_id

GHSA-34hf-g744-jw64

reference_type

scores

value	HIGH
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-34hf-g744-jw64

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	20
name	Improper Input Validation
description	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	400
name	Uncontrolled Resource Consumption
description	The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

Exploits

Severity_range_score 3.3 - 8.9

Exploitability 0.5

Weighted_severity 8.0

Risk_score 4.0

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sns8-17hs-vugu

Vulnerability Instance