Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-xzc1-cy42-2ub4
Summary
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
Aliases
0
alias CVE-2018-1002208
1
alias GHSA-cqj4-m2pc-v9m5
Fixed_packages
0
url pkg:deb/debian/mono@5.18.0.240%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/mono@5.18.0.240%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@5.18.0.240%252Bdfsg-1%3Fdistro=trixie
1
url pkg:deb/debian/mono@5.18.0.240%2Bdfsg-3
purl pkg:deb/debian/mono@5.18.0.240%2Bdfsg-3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-azkx-bdnb-ebbg
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@5.18.0.240%252Bdfsg-3
2
url pkg:deb/debian/mono@6.8.0.105%2Bdfsg-3.3~deb11u1?distro=trixie
purl pkg:deb/debian/mono@6.8.0.105%2Bdfsg-3.3~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@6.8.0.105%252Bdfsg-3.3~deb11u1%3Fdistro=trixie
3
url pkg:deb/debian/mono@6.8.0.105%2Bdfsg-3.3%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/mono@6.8.0.105%2Bdfsg-3.3%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@6.8.0.105%252Bdfsg-3.3%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/mono@6.12.0.199%2Bdfsg-6?distro=trixie
purl pkg:deb/debian/mono@6.12.0.199%2Bdfsg-6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@6.12.0.199%252Bdfsg-6%3Fdistro=trixie
5
url pkg:deb/debian/mono@6.14.1%2Bds2-2?distro=trixie
purl pkg:deb/debian/mono@6.14.1%2Bds2-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@6.14.1%252Bds2-2%3Fdistro=trixie
6
url pkg:nuget/SharpZipLib@1.0.0-rc1
purl pkg:nuget/SharpZipLib@1.0.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fxh1-kq9x-6bbz
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/SharpZipLib@1.0.0-rc1
Affected_packages
0
url pkg:deb/debian/mono@1.2.2.1-1
purl pkg:deb/debian/mono@1.2.2.1-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2jhf-j64s-gygy
1
vulnerability VCID-4g67-mxz3-27ak
2
vulnerability VCID-75b6-ycq1-93ay
3
vulnerability VCID-azkx-bdnb-ebbg
4
vulnerability VCID-c1c3-ck5x-mkay
5
vulnerability VCID-f6cm-frak-aydf
6
vulnerability VCID-fc3w-b9en-rbbm
7
vulnerability VCID-nssu-1x9p-mudc
8
vulnerability VCID-nz8p-usaz-8kgt
9
vulnerability VCID-s4yu-1s7d-bufz
10
vulnerability VCID-sgsg-b4yc-juh6
11
vulnerability VCID-w6qh-dtdh-1bep
12
vulnerability VCID-xzc1-cy42-2ub4
13
vulnerability VCID-yqu4-jn6n-eug3
14
vulnerability VCID-z7ht-bq8z-3qgd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@1.2.2.1-1
1
url pkg:deb/debian/mono@1.2.2.1-1etch1
purl pkg:deb/debian/mono@1.2.2.1-1etch1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2jhf-j64s-gygy
1
vulnerability VCID-4g67-mxz3-27ak
2
vulnerability VCID-75b6-ycq1-93ay
3
vulnerability VCID-azkx-bdnb-ebbg
4
vulnerability VCID-c1c3-ck5x-mkay
5
vulnerability VCID-f6cm-frak-aydf
6
vulnerability VCID-fc3w-b9en-rbbm
7
vulnerability VCID-nssu-1x9p-mudc
8
vulnerability VCID-nz8p-usaz-8kgt
9
vulnerability VCID-s4yu-1s7d-bufz
10
vulnerability VCID-sgsg-b4yc-juh6
11
vulnerability VCID-w6qh-dtdh-1bep
12
vulnerability VCID-xzc1-cy42-2ub4
13
vulnerability VCID-yqu4-jn6n-eug3
14
vulnerability VCID-z7ht-bq8z-3qgd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@1.2.2.1-1etch1
2
url pkg:deb/debian/mono@1.9.1%2Bdfsg-6
purl pkg:deb/debian/mono@1.9.1%2Bdfsg-6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2jhf-j64s-gygy
1
vulnerability VCID-4g67-mxz3-27ak
2
vulnerability VCID-75b6-ycq1-93ay
3
vulnerability VCID-azkx-bdnb-ebbg
4
vulnerability VCID-c1c3-ck5x-mkay
5
vulnerability VCID-fc3w-b9en-rbbm
6
vulnerability VCID-nssu-1x9p-mudc
7
vulnerability VCID-nz8p-usaz-8kgt
8
vulnerability VCID-s4yu-1s7d-bufz
9
vulnerability VCID-w6qh-dtdh-1bep
10
vulnerability VCID-xzc1-cy42-2ub4
11
vulnerability VCID-z7ht-bq8z-3qgd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@1.9.1%252Bdfsg-6
3
url pkg:deb/debian/mono@2.6.7-5.1
purl pkg:deb/debian/mono@2.6.7-5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2jhf-j64s-gygy
1
vulnerability VCID-75b6-ycq1-93ay
2
vulnerability VCID-azkx-bdnb-ebbg
3
vulnerability VCID-fc3w-b9en-rbbm
4
vulnerability VCID-nssu-1x9p-mudc
5
vulnerability VCID-nz8p-usaz-8kgt
6
vulnerability VCID-w6qh-dtdh-1bep
7
vulnerability VCID-xzc1-cy42-2ub4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@2.6.7-5.1
4
url pkg:deb/debian/mono@2.6.7-5.1%2Bdeb6u2
purl pkg:deb/debian/mono@2.6.7-5.1%2Bdeb6u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2jhf-j64s-gygy
1
vulnerability VCID-75b6-ycq1-93ay
2
vulnerability VCID-azkx-bdnb-ebbg
3
vulnerability VCID-fc3w-b9en-rbbm
4
vulnerability VCID-nssu-1x9p-mudc
5
vulnerability VCID-nz8p-usaz-8kgt
6
vulnerability VCID-w6qh-dtdh-1bep
7
vulnerability VCID-xzc1-cy42-2ub4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@2.6.7-5.1%252Bdeb6u2
5
url pkg:deb/debian/mono@2.10.8.1-8%2Bdeb7u1
purl pkg:deb/debian/mono@2.10.8.1-8%2Bdeb7u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2jhf-j64s-gygy
1
vulnerability VCID-azkx-bdnb-ebbg
2
vulnerability VCID-fc3w-b9en-rbbm
3
vulnerability VCID-nssu-1x9p-mudc
4
vulnerability VCID-w6qh-dtdh-1bep
5
vulnerability VCID-xzc1-cy42-2ub4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@2.10.8.1-8%252Bdeb7u1
6
url pkg:deb/debian/mono@3.2.8%2Bdfsg-10
purl pkg:deb/debian/mono@3.2.8%2Bdfsg-10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2jhf-j64s-gygy
1
vulnerability VCID-azkx-bdnb-ebbg
2
vulnerability VCID-xzc1-cy42-2ub4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@3.2.8%252Bdfsg-10
7
url pkg:deb/debian/mono@4.6.2.7%2Bdfsg-1
purl pkg:deb/debian/mono@4.6.2.7%2Bdfsg-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-azkx-bdnb-ebbg
1
vulnerability VCID-xzc1-cy42-2ub4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mono@4.6.2.7%252Bdfsg-1
8
url pkg:nuget/SharpZipLib@0.86.0
purl pkg:nuget/SharpZipLib@0.86.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fxh1-kq9x-6bbz
1
vulnerability VCID-xzc1-cy42-2ub4
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/SharpZipLib@0.86.0
9
url pkg:nuget/SharpZipLib@1.0.0-alpha1
purl pkg:nuget/SharpZipLib@1.0.0-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fxh1-kq9x-6bbz
1
vulnerability VCID-xzc1-cy42-2ub4
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/SharpZipLib@1.0.0-alpha1
10
url pkg:nuget/SharpZipLib@1.0.0-alpha2
purl pkg:nuget/SharpZipLib@1.0.0-alpha2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fxh1-kq9x-6bbz
1
vulnerability VCID-xzc1-cy42-2ub4
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/SharpZipLib@1.0.0-alpha2
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1002208
reference_id
reference_type
scores
0
value 0.00605
scoring_system epss
scoring_elements 0.69542
published_at 2026-04-01T12:55:00Z
1
value 0.00605
scoring_system epss
scoring_elements 0.69639
published_at 2026-04-21T12:55:00Z
2
value 0.00605
scoring_system epss
scoring_elements 0.69658
published_at 2026-04-18T12:55:00Z
3
value 0.00605
scoring_system epss
scoring_elements 0.69649
published_at 2026-04-16T12:55:00Z
4
value 0.00605
scoring_system epss
scoring_elements 0.69609
published_at 2026-04-13T12:55:00Z
5
value 0.00605
scoring_system epss
scoring_elements 0.69623
published_at 2026-04-12T12:55:00Z
6
value 0.00605
scoring_system epss
scoring_elements 0.69638
published_at 2026-04-11T12:55:00Z
7
value 0.00605
scoring_system epss
scoring_elements 0.69616
published_at 2026-04-09T12:55:00Z
8
value 0.00605
scoring_system epss
scoring_elements 0.69599
published_at 2026-04-08T12:55:00Z
9
value 0.00605
scoring_system epss
scoring_elements 0.69549
published_at 2026-04-07T12:55:00Z
10
value 0.00605
scoring_system epss
scoring_elements 0.6957
published_at 2026-04-04T12:55:00Z
11
value 0.00605
scoring_system epss
scoring_elements 0.69554
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1002208
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1002208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1002208
2
reference_url https://github.com/icsharpcode/SharpZipLib/issues/232
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/icsharpcode/SharpZipLib/issues/232
3
reference_url https://github.com/icsharpcode/SharpZipLib/wiki/Release-1.0
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/icsharpcode/SharpZipLib/wiki/Release-1.0
4
reference_url https://github.com/snyk/zip-slip-vulnerability
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/snyk/zip-slip-vulnerability
5
reference_url https://snyk.io/research/zip-slip-vulnerability
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://snyk.io/research/zip-slip-vulnerability
6
reference_url https://snyk.io/vuln/SNYK-DOTNET-SHARPZIPLIB-60247
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-DOTNET-SHARPZIPLIB-60247
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1002208
reference_id CVE-2018-1002208
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-1002208
8
reference_url https://github.com/advisories/GHSA-cqj4-m2pc-v9m5
reference_id GHSA-cqj4-m2pc-v9m5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cqj4-m2pc-v9m5
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 22
name Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
description The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-xzc1-cy42-2ub4