Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-2386-f4qn-sbfx

Summary

Regular Expression Denial of Service
Untrusted input may cause catastrophic backtracking while matching regular expressions. This can cause the application to be unresponsive leading to Denial of Service.

Aliases

alias	GMS-2019-5

Fixed_packages

url pkg:npm/braces@2.3.1

purl pkg:npm/braces@2.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-mssa-dgz3-w7fh

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@2.3.1

Affected_packages

url pkg:npm/braces@0.1.0

purl pkg:npm/braces@0.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@0.1.0

url pkg:npm/braces@0.1.1

purl pkg:npm/braces@0.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@0.1.1

url pkg:npm/braces@0.1.2

purl pkg:npm/braces@0.1.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@0.1.2

url pkg:npm/braces@0.1.4

purl pkg:npm/braces@0.1.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@0.1.4

url pkg:npm/braces@0.1.5

purl pkg:npm/braces@0.1.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@0.1.5

url pkg:npm/braces@1.0.0

purl pkg:npm/braces@1.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.0.0

url pkg:npm/braces@1.1.0

purl pkg:npm/braces@1.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.1.0

url pkg:npm/braces@1.2.0

purl pkg:npm/braces@1.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.2.0

url pkg:npm/braces@1.3.0

purl pkg:npm/braces@1.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.3.0

url pkg:npm/braces@1.4.0

purl pkg:npm/braces@1.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.4.0

url pkg:npm/braces@1.5.0

purl pkg:npm/braces@1.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.5.0

url pkg:npm/braces@1.5.1

purl pkg:npm/braces@1.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.5.1

url pkg:npm/braces@1.6.0

purl pkg:npm/braces@1.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.6.0

url pkg:npm/braces@1.7.0

purl pkg:npm/braces@1.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.7.0

url pkg:npm/braces@1.8.0

purl pkg:npm/braces@1.8.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.8.0

url pkg:npm/braces@1.8.1

purl pkg:npm/braces@1.8.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.8.1

url pkg:npm/braces@1.8.2

purl pkg:npm/braces@1.8.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.8.2

url pkg:npm/braces@1.8.3

purl pkg:npm/braces@1.8.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.8.3

url pkg:npm/braces@1.8.4

purl pkg:npm/braces@1.8.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.8.4

url pkg:npm/braces@1.8.5

purl pkg:npm/braces@1.8.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@1.8.5

url pkg:npm/braces@2.0.0

purl pkg:npm/braces@2.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@2.0.0

url pkg:npm/braces@2.0.1

purl pkg:npm/braces@2.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@2.0.1

url pkg:npm/braces@2.0.2

purl pkg:npm/braces@2.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@2.0.2

url pkg:npm/braces@2.0.3

purl pkg:npm/braces@2.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@2.0.3

url pkg:npm/braces@2.0.4

purl pkg:npm/braces@2.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@2.0.4

url pkg:npm/braces@2.1.0

purl pkg:npm/braces@2.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@2.1.0

url pkg:npm/braces@2.1.1

purl pkg:npm/braces@2.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@2.1.1

url pkg:npm/braces@2.2.0

purl pkg:npm/braces@2.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

vulnerability	VCID-zfmv-3d1v-qye6

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@2.2.0

url pkg:npm/braces@2.2.1

purl pkg:npm/braces@2.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

vulnerability	VCID-zfmv-3d1v-qye6

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@2.2.1

url pkg:npm/braces@2.2.2

purl pkg:npm/braces@2.2.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

vulnerability	VCID-zfmv-3d1v-qye6

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@2.2.2

url pkg:npm/braces@2.3.0

purl pkg:npm/braces@2.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2386-f4qn-sbfx

vulnerability	VCID-mssa-dgz3-w7fh

vulnerability	VCID-ynup-8rhy-fbdz

vulnerability	VCID-zfmv-3d1v-qye6

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/braces@2.3.0

References

reference_url	https://github.com/micromatch/braces/commit/abdafb0cae1e0c00f184abbadc692f4eaa98f451
reference_id
reference_type
scores
url	https://github.com/micromatch/braces/commit/abdafb0cae1e0c00f184abbadc692f4eaa98f451

reference_url	https://www.npmjs.com/advisories/786
reference_id
reference_type
scores
url	https://www.npmjs.com/advisories/786

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score null

Exploitability 0.5

Weighted_severity 0.0

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2386-f4qn-sbfx

Vulnerability Instance