Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-xz5d-fpqp-aff4
Summary
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
ssh2 is client and server modules written in pure JavaScript for node.js. In ssh2 there is a command injection vulnerability. The issue only exists on Windows. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This is fixed
Aliases
0
alias CVE-2020-26301
1
alias GHSA-652h-xwhf-q4h6
Fixed_packages
0
url pkg:npm/ssh2@1.4.0
purl pkg:npm/ssh2@1.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@1.4.0
Affected_packages
0
url pkg:npm/ssh2@0.0.0
purl pkg:npm/ssh2@0.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.0.0
1
url pkg:npm/ssh2@0.0.1
purl pkg:npm/ssh2@0.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.0.1
2
url pkg:npm/ssh2@0.0.2
purl pkg:npm/ssh2@0.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.0.2
3
url pkg:npm/ssh2@0.1.0
purl pkg:npm/ssh2@0.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.1.0
4
url pkg:npm/ssh2@0.1.1
purl pkg:npm/ssh2@0.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.1.1
5
url pkg:npm/ssh2@0.1.2
purl pkg:npm/ssh2@0.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.1.2
6
url pkg:npm/ssh2@0.1.3
purl pkg:npm/ssh2@0.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.1.3
7
url pkg:npm/ssh2@0.1.4
purl pkg:npm/ssh2@0.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.1.4
8
url pkg:npm/ssh2@0.1.5
purl pkg:npm/ssh2@0.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.1.5
9
url pkg:npm/ssh2@0.1.6
purl pkg:npm/ssh2@0.1.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.1.6
10
url pkg:npm/ssh2@0.1.7
purl pkg:npm/ssh2@0.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.1.7
11
url pkg:npm/ssh2@0.1.8
purl pkg:npm/ssh2@0.1.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.1.8
12
url pkg:npm/ssh2@0.1.9
purl pkg:npm/ssh2@0.1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.1.9
13
url pkg:npm/ssh2@0.1.10
purl pkg:npm/ssh2@0.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.1.10
14
url pkg:npm/ssh2@0.1.11
purl pkg:npm/ssh2@0.1.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.1.11
15
url pkg:npm/ssh2@0.1.12
purl pkg:npm/ssh2@0.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.1.12
16
url pkg:npm/ssh2@0.1.13
purl pkg:npm/ssh2@0.1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.1.13
17
url pkg:npm/ssh2@0.2.0
purl pkg:npm/ssh2@0.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.0
18
url pkg:npm/ssh2@0.2.1
purl pkg:npm/ssh2@0.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.1
19
url pkg:npm/ssh2@0.2.2
purl pkg:npm/ssh2@0.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.2
20
url pkg:npm/ssh2@0.2.3
purl pkg:npm/ssh2@0.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.3
21
url pkg:npm/ssh2@0.2.4
purl pkg:npm/ssh2@0.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.4
22
url pkg:npm/ssh2@0.2.5
purl pkg:npm/ssh2@0.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.5
23
url pkg:npm/ssh2@0.2.6
purl pkg:npm/ssh2@0.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.6
24
url pkg:npm/ssh2@0.2.7
purl pkg:npm/ssh2@0.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.7
25
url pkg:npm/ssh2@0.2.8
purl pkg:npm/ssh2@0.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.8
26
url pkg:npm/ssh2@0.2.9
purl pkg:npm/ssh2@0.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.9
27
url pkg:npm/ssh2@0.2.10
purl pkg:npm/ssh2@0.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.10
28
url pkg:npm/ssh2@0.2.11
purl pkg:npm/ssh2@0.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.11
29
url pkg:npm/ssh2@0.2.12
purl pkg:npm/ssh2@0.2.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.12
30
url pkg:npm/ssh2@0.2.13
purl pkg:npm/ssh2@0.2.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.13
31
url pkg:npm/ssh2@0.2.14
purl pkg:npm/ssh2@0.2.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.14
32
url pkg:npm/ssh2@0.2.15
purl pkg:npm/ssh2@0.2.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.15
33
url pkg:npm/ssh2@0.2.16
purl pkg:npm/ssh2@0.2.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.16
34
url pkg:npm/ssh2@0.2.17
purl pkg:npm/ssh2@0.2.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.17
35
url pkg:npm/ssh2@0.2.18
purl pkg:npm/ssh2@0.2.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.18
36
url pkg:npm/ssh2@0.2.19
purl pkg:npm/ssh2@0.2.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.19
37
url pkg:npm/ssh2@0.2.20
purl pkg:npm/ssh2@0.2.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.20
38
url pkg:npm/ssh2@0.2.21
purl pkg:npm/ssh2@0.2.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.21
39
url pkg:npm/ssh2@0.2.22
purl pkg:npm/ssh2@0.2.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.22
40
url pkg:npm/ssh2@0.2.23
purl pkg:npm/ssh2@0.2.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.23
41
url pkg:npm/ssh2@0.2.24
purl pkg:npm/ssh2@0.2.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.24
42
url pkg:npm/ssh2@0.2.25
purl pkg:npm/ssh2@0.2.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.2.25
43
url pkg:npm/ssh2@0.3.0
purl pkg:npm/ssh2@0.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.3.0
44
url pkg:npm/ssh2@0.3.1
purl pkg:npm/ssh2@0.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.3.1
45
url pkg:npm/ssh2@0.3.2
purl pkg:npm/ssh2@0.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.3.2
46
url pkg:npm/ssh2@0.3.3
purl pkg:npm/ssh2@0.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.3.3
47
url pkg:npm/ssh2@0.3.4
purl pkg:npm/ssh2@0.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.3.4
48
url pkg:npm/ssh2@0.3.5
purl pkg:npm/ssh2@0.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.3.5
49
url pkg:npm/ssh2@0.3.6
purl pkg:npm/ssh2@0.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.3.6
50
url pkg:npm/ssh2@0.4.0
purl pkg:npm/ssh2@0.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.0
51
url pkg:npm/ssh2@0.4.1
purl pkg:npm/ssh2@0.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.1
52
url pkg:npm/ssh2@0.4.2
purl pkg:npm/ssh2@0.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.2
53
url pkg:npm/ssh2@0.4.3
purl pkg:npm/ssh2@0.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.3
54
url pkg:npm/ssh2@0.4.4
purl pkg:npm/ssh2@0.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.4
55
url pkg:npm/ssh2@0.4.5
purl pkg:npm/ssh2@0.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.5
56
url pkg:npm/ssh2@0.4.6
purl pkg:npm/ssh2@0.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.6
57
url pkg:npm/ssh2@0.4.7
purl pkg:npm/ssh2@0.4.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.7
58
url pkg:npm/ssh2@0.4.8
purl pkg:npm/ssh2@0.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.8
59
url pkg:npm/ssh2@0.4.9
purl pkg:npm/ssh2@0.4.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.9
60
url pkg:npm/ssh2@0.4.10
purl pkg:npm/ssh2@0.4.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.10
61
url pkg:npm/ssh2@0.4.11
purl pkg:npm/ssh2@0.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.11
62
url pkg:npm/ssh2@0.4.12
purl pkg:npm/ssh2@0.4.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.12
63
url pkg:npm/ssh2@0.4.13
purl pkg:npm/ssh2@0.4.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.13
64
url pkg:npm/ssh2@0.4.14
purl pkg:npm/ssh2@0.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.14
65
url pkg:npm/ssh2@0.4.15
purl pkg:npm/ssh2@0.4.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.4.15
66
url pkg:npm/ssh2@0.5.0
purl pkg:npm/ssh2@0.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.5.0
67
url pkg:npm/ssh2@0.5.1
purl pkg:npm/ssh2@0.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.5.1
68
url pkg:npm/ssh2@0.5.2
purl pkg:npm/ssh2@0.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.5.2
69
url pkg:npm/ssh2@0.5.3
purl pkg:npm/ssh2@0.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.5.3
70
url pkg:npm/ssh2@0.5.4
purl pkg:npm/ssh2@0.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.5.4
71
url pkg:npm/ssh2@0.5.5
purl pkg:npm/ssh2@0.5.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.5.5
72
url pkg:npm/ssh2@0.6.0
purl pkg:npm/ssh2@0.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.6.0
73
url pkg:npm/ssh2@0.6.1
purl pkg:npm/ssh2@0.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.6.1
74
url pkg:npm/ssh2@0.6.2
purl pkg:npm/ssh2@0.6.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.6.2
75
url pkg:npm/ssh2@0.7.0
purl pkg:npm/ssh2@0.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.7.0
76
url pkg:npm/ssh2@0.7.1
purl pkg:npm/ssh2@0.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.7.1
77
url pkg:npm/ssh2@0.7.2
purl pkg:npm/ssh2@0.7.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.7.2
78
url pkg:npm/ssh2@0.8.0
purl pkg:npm/ssh2@0.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.8.0
79
url pkg:npm/ssh2@0.8.1
purl pkg:npm/ssh2@0.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.8.1
80
url pkg:npm/ssh2@0.8.2
purl pkg:npm/ssh2@0.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.8.2
81
url pkg:npm/ssh2@0.8.3
purl pkg:npm/ssh2@0.8.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.8.3
82
url pkg:npm/ssh2@0.8.4
purl pkg:npm/ssh2@0.8.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.8.4
83
url pkg:npm/ssh2@0.8.5
purl pkg:npm/ssh2@0.8.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.8.5
84
url pkg:npm/ssh2@0.8.6
purl pkg:npm/ssh2@0.8.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.8.6
85
url pkg:npm/ssh2@0.8.7
purl pkg:npm/ssh2@0.8.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.8.7
86
url pkg:npm/ssh2@0.8.8
purl pkg:npm/ssh2@0.8.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.8.8
87
url pkg:npm/ssh2@0.8.9
purl pkg:npm/ssh2@0.8.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@0.8.9
88
url pkg:npm/ssh2@1.0.0
purl pkg:npm/ssh2@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@1.0.0
89
url pkg:npm/ssh2@1.1.0
purl pkg:npm/ssh2@1.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@1.1.0
90
url pkg:npm/ssh2@1.2.0
purl pkg:npm/ssh2@1.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@1.2.0
91
url pkg:npm/ssh2@1.3.0
purl pkg:npm/ssh2@1.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jzn6-bzzf-nugp
1
vulnerability VCID-xz5d-fpqp-aff4
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ssh2@1.3.0
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26301.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26301.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-26301
reference_id
reference_type
scores
0
value 0.05066
scoring_system epss
scoring_elements 0.89803
published_at 2026-04-18T12:55:00Z
1
value 0.05066
scoring_system epss
scoring_elements 0.89746
published_at 2026-04-01T12:55:00Z
2
value 0.05066
scoring_system epss
scoring_elements 0.8975
published_at 2026-04-02T12:55:00Z
3
value 0.05066
scoring_system epss
scoring_elements 0.89764
published_at 2026-04-04T12:55:00Z
4
value 0.05066
scoring_system epss
scoring_elements 0.89766
published_at 2026-04-07T12:55:00Z
5
value 0.05066
scoring_system epss
scoring_elements 0.89784
published_at 2026-04-08T12:55:00Z
6
value 0.05066
scoring_system epss
scoring_elements 0.8979
published_at 2026-04-09T12:55:00Z
7
value 0.05066
scoring_system epss
scoring_elements 0.89796
published_at 2026-04-11T12:55:00Z
8
value 0.05066
scoring_system epss
scoring_elements 0.89795
published_at 2026-04-12T12:55:00Z
9
value 0.05066
scoring_system epss
scoring_elements 0.89788
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-26301
2
reference_url https://github.com/mscdex/ssh2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/mscdex/ssh2
3
reference_url https://github.com/mscdex/ssh2/commit/f763271f41320e71d5cbee02ea5bc6a2ded3ca21
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/mscdex/ssh2/commit/f763271f41320e71d5cbee02ea5bc6a2ded3ca21
4
reference_url https://securitylab.github.com/advisories/GHSL-2020-123-mscdex-ssh2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://securitylab.github.com/advisories/GHSL-2020-123-mscdex-ssh2
5
reference_url https://securitylab.github.com/advisories/GHSL-2020-123-mscdex-ssh2/
reference_id
reference_type
scores
url https://securitylab.github.com/advisories/GHSL-2020-123-mscdex-ssh2/
6
reference_url https://www.npmjs.com/package/ssh2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.npmjs.com/package/ssh2
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2006958
reference_id 2006958
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2006958
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-26301
reference_id CVE-2020-26301
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-26301
9
reference_url https://github.com/advisories/GHSA-652h-xwhf-q4h6
reference_id GHSA-652h-xwhf-q4h6
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-652h-xwhf-q4h6
10
reference_url https://access.redhat.com/errata/RHSA-2021:4845
reference_id RHSA-2021:4845
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4845
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 78
name Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
description The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score5.4 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-xz5d-fpqp-aff4