Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-csp5-2v9h-yqav
Summary
Security researcher Abhishek Arya (Inferno) of the Google
Chrome Security Team used the Address Sanitizer tool to discover a
user-after-free when interacting with HTML document templates. This leads to a
potentially exploitable crash.
In general this flaw cannot be exploited through email in the
Thunderbird and Seamonkey products because scripting is disabled, but is
potentially a risk in browser or browser-like contexts.
Aliases
0
alias CVE-2013-5603
Fixed_packages
0
url pkg:ebuild/dev-libs/nspr@2.33.1
purl pkg:ebuild/dev-libs/nspr@2.33.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-libs/nspr@2.33.1
1
url pkg:ebuild/dev-libs/nspr@4.10.6
purl pkg:ebuild/dev-libs/nspr@4.10.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-libs/nspr@4.10.6
2
url pkg:ebuild/dev-libs/nspr@31.5.0
purl pkg:ebuild/dev-libs/nspr@31.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-libs/nspr@31.5.0
3
url pkg:ebuild/dev-libs/nspr@31.5.3
purl pkg:ebuild/dev-libs/nspr@31.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-libs/nspr@31.5.3
4
url pkg:ebuild/mail-client/thunderbird@31.5.0
purl pkg:ebuild/mail-client/thunderbird@31.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird@31.5.0
5
url pkg:ebuild/mail-client/thunderbird@31.5.3
purl pkg:ebuild/mail-client/thunderbird@31.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird@31.5.3
6
url pkg:ebuild/mail-client/thunderbird-bin@31.5.0
purl pkg:ebuild/mail-client/thunderbird-bin@31.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird-bin@31.5.0
7
url pkg:ebuild/mail-client/thunderbird-bin@31.5.3
purl pkg:ebuild/mail-client/thunderbird-bin@31.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird-bin@31.5.3
8
url pkg:ebuild/www-client/firefox@31.5.3
purl pkg:ebuild/www-client/firefox@31.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/firefox@31.5.3
9
url pkg:ebuild/www-client/firefox-bin@31.5.3
purl pkg:ebuild/www-client/firefox-bin@31.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/firefox-bin@31.5.3
10
url pkg:ebuild/www-client/seamonkey@2.33.1
purl pkg:ebuild/www-client/seamonkey@2.33.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey@2.33.1
11
url pkg:ebuild/www-client/seamonkey@31.5.0
purl pkg:ebuild/www-client/seamonkey@31.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey@31.5.0
12
url pkg:ebuild/www-client/seamonkey@31.5.3
purl pkg:ebuild/www-client/seamonkey@31.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey@31.5.3
13
url pkg:ebuild/www-client/seamonkey-bin@2.33.1
purl pkg:ebuild/www-client/seamonkey-bin@2.33.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@2.33.1
14
url pkg:ebuild/www-client/seamonkey-bin@31.5.0
purl pkg:ebuild/www-client/seamonkey-bin@31.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@31.5.0
15
url pkg:ebuild/www-client/seamonkey-bin@31.5.3
purl pkg:ebuild/www-client/seamonkey-bin@31.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@31.5.3
16
url pkg:mozilla/Firefox@25.0.0
purl pkg:mozilla/Firefox@25.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@25.0.0
17
url pkg:mozilla/Firefox%20ESR@24.1.0
purl pkg:mozilla/Firefox%20ESR@24.1.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox%2520ESR@24.1.0
18
url pkg:mozilla/Seamonkey@2.22.0
purl pkg:mozilla/Seamonkey@2.22.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Seamonkey@2.22.0
19
url pkg:mozilla/Thunderbird@24.1.0
purl pkg:mozilla/Thunderbird@24.1.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Thunderbird@24.1.0
Affected_packages
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5603.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5603.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-5603
reference_id
reference_type
scores
0
value 0.0527
scoring_system epss
scoring_elements 0.90168
published_at 2026-06-04T12:55:00Z
1
value 0.0527
scoring_system epss
scoring_elements 0.90184
published_at 2026-06-05T12:55:00Z
2
value 0.0527
scoring_system epss
scoring_elements 0.90183
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-5603
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1023845
reference_id 1023845
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1023845
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5603
reference_id CVE-2013-5603
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5603
4
reference_url https://security.gentoo.org/glsa/201504-01
reference_id GLSA-201504-01
reference_type
scores
url https://security.gentoo.org/glsa/201504-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2013-102
reference_id mfsa2013-102
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2013-102
6
reference_url https://usn.ubuntu.com/2009-1/
reference_id USN-2009-1
reference_type
scores
url https://usn.ubuntu.com/2009-1/
7
reference_url https://usn.ubuntu.com/2010-1/
reference_id USN-2010-1
reference_type
scores
url https://usn.ubuntu.com/2010-1/
Weaknesses
0
cwe_id 416
name Use After Free
description Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.
Exploits
Severity_range_score9.0 - 10.0
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-csp5-2v9h-yqav