Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-wjaq-7np6-z3bk

Summary

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Versions of the package tough-cookie before 4.1.3 is vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.

Aliases

alias	CVE-2023-26136

alias	GHSA-72xf-g2v4-qvf3

Fixed_packages

url	pkg:deb/debian/node-tough-cookie@4.0.0-2%2Bdeb11u1
purl	pkg:deb/debian/node-tough-cookie@4.0.0-2%2Bdeb11u1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-tough-cookie@4.0.0-2%252Bdeb11u1

url	pkg:deb/debian/node-tough-cookie@4.0.0-2%2Bdeb11u1?distro=trixie
purl	pkg:deb/debian/node-tough-cookie@4.0.0-2%2Bdeb11u1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-tough-cookie@4.0.0-2%252Bdeb11u1%3Fdistro=trixie

url	pkg:deb/debian/node-tough-cookie@4.0.0-2%2Bdeb12u1?distro=trixie
purl	pkg:deb/debian/node-tough-cookie@4.0.0-2%2Bdeb12u1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-tough-cookie@4.0.0-2%252Bdeb12u1%3Fdistro=trixie

url	pkg:deb/debian/node-tough-cookie@4.1.3%2B~4.0.2-1?distro=trixie
purl	pkg:deb/debian/node-tough-cookie@4.1.3%2B~4.0.2-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-tough-cookie@4.1.3%252B~4.0.2-1%3Fdistro=trixie

url	pkg:deb/debian/node-tough-cookie@4.1.4%2B~4.0.5-2?distro=trixie
purl	pkg:deb/debian/node-tough-cookie@4.1.4%2B~4.0.5-2?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-tough-cookie@4.1.4%252B~4.0.5-2%3Fdistro=trixie

url	pkg:npm/tough-cookie@4.1.3
purl	pkg:npm/tough-cookie@4.1.3
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@4.1.3

Affected_packages

url pkg:deb/debian/node-tough-cookie@2.3.4%2Bdfsg-1

purl pkg:deb/debian/node-tough-cookie@2.3.4%2Bdfsg-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-tough-cookie@2.3.4%252Bdfsg-1

url pkg:npm/tough-cookie@0.9.0

purl pkg:npm/tough-cookie@0.9.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.9.0

url pkg:npm/tough-cookie@0.9.1

purl pkg:npm/tough-cookie@0.9.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.9.1

url pkg:npm/tough-cookie@0.9.3

purl pkg:npm/tough-cookie@0.9.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.9.3

url pkg:npm/tough-cookie@0.9.4

purl pkg:npm/tough-cookie@0.9.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.9.4

url pkg:npm/tough-cookie@0.9.5

purl pkg:npm/tough-cookie@0.9.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.9.5

url pkg:npm/tough-cookie@0.9.6

purl pkg:npm/tough-cookie@0.9.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.9.6

url pkg:npm/tough-cookie@0.9.7

purl pkg:npm/tough-cookie@0.9.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.9.7

url pkg:npm/tough-cookie@0.9.8

purl pkg:npm/tough-cookie@0.9.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.9.8

url pkg:npm/tough-cookie@0.9.9

purl pkg:npm/tough-cookie@0.9.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.9.9

url pkg:npm/tough-cookie@0.9.11

purl pkg:npm/tough-cookie@0.9.11

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.9.11

url pkg:npm/tough-cookie@0.9.12

purl pkg:npm/tough-cookie@0.9.12

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.9.12

url pkg:npm/tough-cookie@0.9.13

purl pkg:npm/tough-cookie@0.9.13

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.9.13

url pkg:npm/tough-cookie@0.9.14

purl pkg:npm/tough-cookie@0.9.14

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.9.14

url pkg:npm/tough-cookie@0.9.15

purl pkg:npm/tough-cookie@0.9.15

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.9.15

url pkg:npm/tough-cookie@0.10.0

purl pkg:npm/tough-cookie@0.10.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.10.0

url pkg:npm/tough-cookie@0.11.0

purl pkg:npm/tough-cookie@0.11.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.11.0

url pkg:npm/tough-cookie@0.12.0

purl pkg:npm/tough-cookie@0.12.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.12.0

url pkg:npm/tough-cookie@0.12.1

purl pkg:npm/tough-cookie@0.12.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.12.1

url pkg:npm/tough-cookie@0.13.0

purl pkg:npm/tough-cookie@0.13.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@0.13.0

url pkg:npm/tough-cookie@1.0.0

purl pkg:npm/tough-cookie@1.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@1.0.0

url pkg:npm/tough-cookie@1.1.0

purl pkg:npm/tough-cookie@1.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@1.1.0

url pkg:npm/tough-cookie@1.2.0

purl pkg:npm/tough-cookie@1.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@1.2.0

url pkg:npm/tough-cookie@2.0.0

purl pkg:npm/tough-cookie@2.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@2.0.0

url pkg:npm/tough-cookie@2.1.0

purl pkg:npm/tough-cookie@2.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@2.1.0

url pkg:npm/tough-cookie@2.2.0

purl pkg:npm/tough-cookie@2.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@2.2.0

url pkg:npm/tough-cookie@2.2.1

purl pkg:npm/tough-cookie@2.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@2.2.1

url pkg:npm/tough-cookie@2.2.2

purl pkg:npm/tough-cookie@2.2.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-gcrq-1at1-bygq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-z4vf-knv2-7qeb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@2.2.2

url pkg:npm/tough-cookie@2.3.0

purl pkg:npm/tough-cookie@2.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@2.3.0

url pkg:npm/tough-cookie@2.3.1

purl pkg:npm/tough-cookie@2.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@2.3.1

url pkg:npm/tough-cookie@2.3.2

purl pkg:npm/tough-cookie@2.3.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3buh-pfq7-9kf2

vulnerability	VCID-am2z-v7gj-nqch

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@2.3.2

url pkg:npm/tough-cookie@2.3.3

purl pkg:npm/tough-cookie@2.3.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@2.3.3

url pkg:npm/tough-cookie@2.3.4

purl pkg:npm/tough-cookie@2.3.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@2.3.4

url pkg:npm/tough-cookie@2.4.2

purl pkg:npm/tough-cookie@2.4.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@2.4.2

url pkg:npm/tough-cookie@2.4.3

purl pkg:npm/tough-cookie@2.4.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@2.4.3

url pkg:npm/tough-cookie@2.5.0

purl pkg:npm/tough-cookie@2.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@2.5.0

url pkg:npm/tough-cookie@3.0.0

purl pkg:npm/tough-cookie@3.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@3.0.0

url pkg:npm/tough-cookie@3.0.1

purl pkg:npm/tough-cookie@3.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@3.0.1

url pkg:npm/tough-cookie@4.0.0

purl pkg:npm/tough-cookie@4.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@4.0.0

url pkg:npm/tough-cookie@4.1.0

purl pkg:npm/tough-cookie@4.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@4.1.0

url pkg:npm/tough-cookie@4.1.1

purl pkg:npm/tough-cookie@4.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@4.1.1

url pkg:npm/tough-cookie@4.1.2

purl pkg:npm/tough-cookie@4.1.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wjaq-7np6-z3bk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/tough-cookie@4.1.2

url pkg:rpm/redhat/eap7-activemq-artemis@2.16.0-15.redhat_00049.1?arch=el7eap

purl pkg:rpm/redhat/eap7-activemq-artemis@2.16.0-15.redhat_00049.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-activemq-artemis@2.16.0-15.redhat_00049.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-activemq-artemis@2.16.0-15.redhat_00049.1?arch=el9eap

purl pkg:rpm/redhat/eap7-activemq-artemis@2.16.0-15.redhat_00049.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-activemq-artemis@2.16.0-15.redhat_00049.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-activemq-artemis@2.16.0-15.redhat_00049.1?arch=el8eap

purl pkg:rpm/redhat/eap7-activemq-artemis@2.16.0-15.redhat_00049.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-activemq-artemis@2.16.0-15.redhat_00049.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-bouncycastle@1.76.0-4.redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-bouncycastle@1.76.0-4.redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-abxq-7eq3-g7dp

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-bouncycastle@1.76.0-4.redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-bouncycastle@1.76.0-4.redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-bouncycastle@1.76.0-4.redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-abxq-7eq3-g7dp

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-bouncycastle@1.76.0-4.redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-bouncycastle@1.76.0-4.redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-bouncycastle@1.76.0-4.redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-abxq-7eq3-g7dp

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-bouncycastle@1.76.0-4.redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-hal-console@3.3.19-1.Final_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-hal-console@3.3.19-1.Final_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-hal-console@3.3.19-1.Final_redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-hal-console@3.3.19-1.Final_redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-hal-console@3.3.19-1.Final_redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-hal-console@3.3.19-1.Final_redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-hal-console@3.3.19-1.Final_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-hal-console@3.3.19-1.Final_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-hal-console@3.3.19-1.Final_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-hibernate@5.3.31-1.Final_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-hibernate@5.3.31-1.Final_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-hibernate@5.3.31-1.Final_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-hibernate@5.3.31-1.Final_redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-hibernate@5.3.31-1.Final_redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-hibernate@5.3.31-1.Final_redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-hibernate@5.3.31-1.Final_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-hibernate@5.3.31-1.Final_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-hibernate@5.3.31-1.Final_redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-ironjacamar@1.5.15-1.Final_redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-ironjacamar@1.5.15-1.Final_redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-ironjacamar@1.5.15-1.Final_redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-ironjacamar@1.5.15-1.Final_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-ironjacamar@1.5.15-1.Final_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-ironjacamar@1.5.15-1.Final_redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-ironjacamar@1.5.15-1.Final_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-ironjacamar@1.5.15-1.Final_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-ironjacamar@1.5.15-1.Final_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-jboss-marshalling@2.0.13-2.SP1_redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-jboss-marshalling@2.0.13-2.SP1_redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-marshalling@2.0.13-2.SP1_redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-jboss-marshalling@2.0.13-2.SP1_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-jboss-marshalling@2.0.13-2.SP1_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-marshalling@2.0.13-2.SP1_redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-jboss-marshalling@2.0.13-2.SP1_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-jboss-marshalling@2.0.13-2.SP1_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-marshalling@2.0.13-2.SP1_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-jboss-modules@1.12.2-1.Final_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-jboss-modules@1.12.2-1.Final_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-modules@1.12.2-1.Final_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-jboss-modules@1.12.2-1.Final_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-jboss-modules@1.12.2-1.Final_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-modules@1.12.2-1.Final_redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-jboss-modules@1.12.2-1.Final_redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-jboss-modules@1.12.2-1.Final_redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-modules@1.12.2-1.Final_redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-jboss-server-migration@1.10.0-31.Final_redhat_00030.1?arch=el7eap

purl pkg:rpm/redhat/eap7-jboss-server-migration@1.10.0-31.Final_redhat_00030.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-server-migration@1.10.0-31.Final_redhat_00030.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-jboss-server-migration@1.10.0-31.Final_redhat_00030.1?arch=el9eap

purl pkg:rpm/redhat/eap7-jboss-server-migration@1.10.0-31.Final_redhat_00030.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-server-migration@1.10.0-31.Final_redhat_00030.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-jboss-server-migration@1.10.0-31.Final_redhat_00030.1?arch=el8eap

purl pkg:rpm/redhat/eap7-jboss-server-migration@1.10.0-31.Final_redhat_00030.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-server-migration@1.10.0-31.Final_redhat_00030.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-jboss-xnio-base@3.8.10-1.Final_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-jboss-xnio-base@3.8.10-1.Final_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-xnio-base@3.8.10-1.Final_redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-jboss-xnio-base@3.8.10-1.Final_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-jboss-xnio-base@3.8.10-1.Final_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-xnio-base@3.8.10-1.Final_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-jboss-xnio-base@3.8.10-1.Final_redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-jboss-xnio-base@3.8.10-1.Final_redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-xnio-base@3.8.10-1.Final_redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-mod_cluster@1.4.5-1.Final_redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-mod_cluster@1.4.5-1.Final_redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-mod_cluster@1.4.5-1.Final_redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-mod_cluster@1.4.5-1.Final_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-mod_cluster@1.4.5-1.Final_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-mod_cluster@1.4.5-1.Final_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-mod_cluster@1.4.5-1.Final_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-mod_cluster@1.4.5-1.Final_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-mod_cluster@1.4.5-1.Final_redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-netty@4.1.94-1.Final_redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-netty@4.1.94-1.Final_redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8b9g-6r2j-tqhw

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-netty@4.1.94-1.Final_redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-netty@4.1.94-1.Final_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-netty@4.1.94-1.Final_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8b9g-6r2j-tqhw

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-netty@4.1.94-1.Final_redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-netty@4.1.94-1.Final_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-netty@4.1.94-1.Final_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8b9g-6r2j-tqhw

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-netty@4.1.94-1.Final_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-netty-transport-native-epoll@4.1.94-1.Final_redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-netty-transport-native-epoll@4.1.94-1.Final_redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8b9g-6r2j-tqhw

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-netty-transport-native-epoll@4.1.94-1.Final_redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-netty-transport-native-epoll@4.1.94-1.Final_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-netty-transport-native-epoll@4.1.94-1.Final_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8b9g-6r2j-tqhw

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-netty-transport-native-epoll@4.1.94-1.Final_redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-netty-transport-native-epoll@4.1.94-1.Final_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-netty-transport-native-epoll@4.1.94-1.Final_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8b9g-6r2j-tqhw

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-netty-transport-native-epoll@4.1.94-1.Final_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-resteasy@3.15.8-1.Final_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-resteasy@3.15.8-1.Final_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-resteasy@3.15.8-1.Final_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-resteasy@3.15.8-1.Final_redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-resteasy@3.15.8-1.Final_redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-resteasy@3.15.8-1.Final_redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-resteasy@3.15.8-1.Final_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-resteasy@3.15.8-1.Final_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-resteasy@3.15.8-1.Final_redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-undertow@2.2.26-1.SP1_redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-undertow@2.2.26-1.SP1_redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-undertow@2.2.26-1.SP1_redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-undertow@2.2.26-1.SP1_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-undertow@2.2.26-1.SP1_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-undertow@2.2.26-1.SP1_redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-undertow@2.2.26-1.SP1_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-undertow@2.2.26-1.SP1_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-undertow@2.2.26-1.SP1_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-wildfly@7.4.13-8.GA_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-wildfly@7.4.13-8.GA_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wcnb-gy83-8yaw

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly@7.4.13-8.GA_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-wildfly@7.4.13-8.GA_redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-wildfly@7.4.13-8.GA_redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wcnb-gy83-8yaw

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly@7.4.13-8.GA_redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-wildfly@7.4.13-8.GA_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-wildfly@7.4.13-8.GA_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wcnb-gy83-8yaw

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly@7.4.13-8.GA_redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-wildfly-elytron@1.15.20-1.Final_redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-wildfly-elytron@1.15.20-1.Final_redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wcnb-gy83-8yaw

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-elytron@1.15.20-1.Final_redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-wildfly-elytron@1.15.20-1.Final_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-wildfly-elytron@1.15.20-1.Final_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wcnb-gy83-8yaw

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-elytron@1.15.20-1.Final_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-wildfly-elytron@1.15.20-1.Final_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-wildfly-elytron@1.15.20-1.Final_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-khr7-6pza-afab

vulnerability	VCID-nahx-etfu-qqfq

vulnerability	VCID-wcnb-gy83-8yaw

vulnerability	VCID-wjaq-7np6-z3bk

vulnerability	VCID-zxsk-ucu6-73h1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-elytron@1.15.20-1.Final_redhat_00001.1%3Farch=el8eap

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-26136.json

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-26136.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2023-26136

reference_id

reference_type

scores

value	0.06371
scoring_system	epss
scoring_elements	0.91029
published_at	2026-04-18T12:55:00Z

value	0.06371
scoring_system	epss
scoring_elements	0.91031
published_at	2026-04-16T12:55:00Z

value	0.06371
scoring_system	epss
scoring_elements	0.90962
published_at	2026-04-02T12:55:00Z

value	0.06371
scoring_system	epss
scoring_elements	0.91006
published_at	2026-04-13T12:55:00Z

value	0.06371
scoring_system	epss
scoring_elements	0.91007
published_at	2026-04-12T12:55:00Z

value	0.06371
scoring_system	epss
scoring_elements	0.90998
published_at	2026-04-09T12:55:00Z

value	0.06371
scoring_system	epss
scoring_elements	0.90993
published_at	2026-04-08T12:55:00Z

value	0.06371
scoring_system	epss
scoring_elements	0.90982
published_at	2026-04-07T12:55:00Z

value	0.06371
scoring_system	epss
scoring_elements	0.90971
published_at	2026-04-04T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2023-26136

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26136
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26136

reference_url

https://github.com/salesforce/tough-cookie

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/salesforce/tough-cookie

reference_url

https://github.com/salesforce/tough-cookie/commit/12d474791bb856004e858fdb1c47b7608d09cf6e

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P

value	MODERATE
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-01-09T20:37:58Z/

url

https://github.com/salesforce/tough-cookie/commit/12d474791bb856004e858fdb1c47b7608d09cf6e

reference_url

https://github.com/salesforce/tough-cookie/issues/282

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P

value	MODERATE
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-01-09T20:37:58Z/

url

https://github.com/salesforce/tough-cookie/issues/282

reference_url

https://github.com/salesforce/tough-cookie/releases/tag/v4.1.3

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P

value	MODERATE
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-01-09T20:37:58Z/

url

https://github.com/salesforce/tough-cookie/releases/tag/v4.1.3

reference_url

https://lists.debian.org/debian-lts-announce/2023/07/msg00010.html

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P

value	MODERATE
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-01-09T20:37:58Z/

url

https://lists.debian.org/debian-lts-announce/2023/07/msg00010.html

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ

reference_url

https://security.netapp.com/advisory/ntap-20240621-0006

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://security.netapp.com/advisory/ntap-20240621-0006

reference_url

https://security.snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P

value	MODERATE
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-01-09T20:37:58Z/

url

https://security.snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=2219310
reference_id	2219310
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=2219310

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2/

reference_id

3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-01-09T20:37:58Z/

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ/

reference_id

6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-01-09T20:37:58Z/

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ/

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2023-26136

reference_id

CVE-2023-26136

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2023-26136

reference_url

https://github.com/advisories/GHSA-72xf-g2v4-qvf3

reference_id

GHSA-72xf-g2v4-qvf3

reference_type

scores

value	MODERATE
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-72xf-g2v4-qvf3

reference_url	https://access.redhat.com/errata/RHSA-2023:3998
reference_id	RHSA-2023:3998
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2023:3998

reference_url	https://access.redhat.com/errata/RHSA-2023:5006
reference_id	RHSA-2023:5006
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2023:5006

reference_url	https://access.redhat.com/errata/RHSA-2023:5541
reference_id	RHSA-2023:5541
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2023:5541

reference_url	https://access.redhat.com/errata/RHSA-2023:5542
reference_id	RHSA-2023:5542
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2023:5542

reference_url	https://access.redhat.com/errata/RHSA-2023:7222
reference_id	RHSA-2023:7222
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2023:7222

reference_url	https://access.redhat.com/errata/RHSA-2024:8676
reference_id	RHSA-2024:8676
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:8676

reference_url	https://access.redhat.com/errata/RHSA-2025:0082
reference_id	RHSA-2025:0082
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2025:0082

reference_url	https://access.redhat.com/errata/RHSA-2025:0164
reference_id	RHSA-2025:0164
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2025:0164

reference_url	https://access.redhat.com/errata/RHSA-2025:0323
reference_id	RHSA-2025:0323
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2025:0323

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	1321
name	Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
description	The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score 4.0 - 6.9

Exploitability 0.5

Weighted_severity 6.2

Risk_score 3.1

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wjaq-7np6-z3bk

Vulnerability Instance