Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-yk4c-9hbr-13dz
SummaryCode injection in ansible
Aliases
0
alias CVE-2017-2809
1
alias GHSA-c2w9-48qc-qpj4
2
alias PYSEC-2017-5
Fixed_packages
0
url pkg:pypi/ansible@1.1
purl pkg:pypi/ansible@1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ggg-7w5s-r3g2
1
vulnerability VCID-1u93-v71q-pbht
2
vulnerability VCID-2atd-9e9a-vbgk
3
vulnerability VCID-2ggn-yasq-5qg6
4
vulnerability VCID-2mn4-wz9d-b7cu
5
vulnerability VCID-2s19-y5sg-uyd7
6
vulnerability VCID-3d73-q2yz-sqg7
7
vulnerability VCID-5vvq-8gqh-cug2
8
vulnerability VCID-6c93-cjxv-tqha
9
vulnerability VCID-6fs2-bzr8-uyfx
10
vulnerability VCID-6vx2-ergh-3fb5
11
vulnerability VCID-74mp-e5z4-tbfe
12
vulnerability VCID-7hmy-p927-akff
13
vulnerability VCID-7qe9-zztp-2qcg
14
vulnerability VCID-7ue1-2wu6-6kac
15
vulnerability VCID-9cqv-1b34-6qeu
16
vulnerability VCID-9hkf-5qv5-8kfc
17
vulnerability VCID-9w4h-jq9s-g7a9
18
vulnerability VCID-admn-xypq-dfd3
19
vulnerability VCID-c6xz-7sbm-bkgg
20
vulnerability VCID-cu9y-y9js-sfgs
21
vulnerability VCID-e6k3-dnkn-uyc9
22
vulnerability VCID-gehx-djwb-hyeu
23
vulnerability VCID-gn4t-xdvs-bfa5
24
vulnerability VCID-gqjp-g6rq-ufe4
25
vulnerability VCID-hdq4-sau3-t3b7
26
vulnerability VCID-hjab-3x7e-dugv
27
vulnerability VCID-htd4-k6p6-7qhn
28
vulnerability VCID-j7b4-vb5m-gqea
29
vulnerability VCID-jk54-fyfx-jyd9
30
vulnerability VCID-k1y6-9tte-17b1
31
vulnerability VCID-kvx2-33ke-vfft
32
vulnerability VCID-me3g-thr4-qbhc
33
vulnerability VCID-mhqz-3aw4-qfcr
34
vulnerability VCID-mmsh-dxa8-xqhg
35
vulnerability VCID-mn11-s233-xycs
36
vulnerability VCID-mpqq-wudg-jbbc
37
vulnerability VCID-mr24-6aas-sybn
38
vulnerability VCID-na4w-y2b6-bqg5
39
vulnerability VCID-nfws-dgab-euh5
40
vulnerability VCID-nkck-45s4-uqdg
41
vulnerability VCID-p59n-33jf-mfag
42
vulnerability VCID-pk1h-2p95-y7dj
43
vulnerability VCID-q2mh-7zc6-3fgg
44
vulnerability VCID-rgf5-469p-3yb6
45
vulnerability VCID-rt9h-zyku-rye3
46
vulnerability VCID-sbyy-fg58-jfeh
47
vulnerability VCID-t1xr-3yfm-83hb
48
vulnerability VCID-t3p1-ygpr-h7bw
49
vulnerability VCID-t4tg-xx63-hfeu
50
vulnerability VCID-u7nm-vqu5-pkaw
51
vulnerability VCID-ur8z-srmt-17au
52
vulnerability VCID-urab-49u6-jyha
53
vulnerability VCID-v76s-gmp4-qucp
54
vulnerability VCID-ve84-7ux8-8ff6
55
vulnerability VCID-vg9v-rpvu-gkh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@1.1
1
url pkg:pypi/ansible-vault@1.0.5
purl pkg:pypi/ansible-vault@1.0.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible-vault@1.0.5
Affected_packages
0
url pkg:pypi/ansible@1.0
purl pkg:pypi/ansible@1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ggg-7w5s-r3g2
1
vulnerability VCID-1u93-v71q-pbht
2
vulnerability VCID-2atd-9e9a-vbgk
3
vulnerability VCID-2ggn-yasq-5qg6
4
vulnerability VCID-2mn4-wz9d-b7cu
5
vulnerability VCID-2s19-y5sg-uyd7
6
vulnerability VCID-3d73-q2yz-sqg7
7
vulnerability VCID-5vvq-8gqh-cug2
8
vulnerability VCID-6c93-cjxv-tqha
9
vulnerability VCID-6fs2-bzr8-uyfx
10
vulnerability VCID-6vx2-ergh-3fb5
11
vulnerability VCID-74mp-e5z4-tbfe
12
vulnerability VCID-7hmy-p927-akff
13
vulnerability VCID-7qe9-zztp-2qcg
14
vulnerability VCID-7ue1-2wu6-6kac
15
vulnerability VCID-9cqv-1b34-6qeu
16
vulnerability VCID-9hkf-5qv5-8kfc
17
vulnerability VCID-9w4h-jq9s-g7a9
18
vulnerability VCID-admn-xypq-dfd3
19
vulnerability VCID-c6xz-7sbm-bkgg
20
vulnerability VCID-cu9y-y9js-sfgs
21
vulnerability VCID-e6k3-dnkn-uyc9
22
vulnerability VCID-gehx-djwb-hyeu
23
vulnerability VCID-gn4t-xdvs-bfa5
24
vulnerability VCID-gqjp-g6rq-ufe4
25
vulnerability VCID-hdq4-sau3-t3b7
26
vulnerability VCID-hjab-3x7e-dugv
27
vulnerability VCID-htd4-k6p6-7qhn
28
vulnerability VCID-j7b4-vb5m-gqea
29
vulnerability VCID-jk54-fyfx-jyd9
30
vulnerability VCID-k1y6-9tte-17b1
31
vulnerability VCID-kvx2-33ke-vfft
32
vulnerability VCID-me3g-thr4-qbhc
33
vulnerability VCID-mhqz-3aw4-qfcr
34
vulnerability VCID-mmsh-dxa8-xqhg
35
vulnerability VCID-mn11-s233-xycs
36
vulnerability VCID-mpqq-wudg-jbbc
37
vulnerability VCID-mr24-6aas-sybn
38
vulnerability VCID-na4w-y2b6-bqg5
39
vulnerability VCID-nfws-dgab-euh5
40
vulnerability VCID-nkck-45s4-uqdg
41
vulnerability VCID-p59n-33jf-mfag
42
vulnerability VCID-pk1h-2p95-y7dj
43
vulnerability VCID-q2mh-7zc6-3fgg
44
vulnerability VCID-rgf5-469p-3yb6
45
vulnerability VCID-rt9h-zyku-rye3
46
vulnerability VCID-sbyy-fg58-jfeh
47
vulnerability VCID-t1xr-3yfm-83hb
48
vulnerability VCID-t3p1-ygpr-h7bw
49
vulnerability VCID-t4tg-xx63-hfeu
50
vulnerability VCID-u7nm-vqu5-pkaw
51
vulnerability VCID-ur8z-srmt-17au
52
vulnerability VCID-urab-49u6-jyha
53
vulnerability VCID-v76s-gmp4-qucp
54
vulnerability VCID-ve84-7ux8-8ff6
55
vulnerability VCID-vg9v-rpvu-gkh4
56
vulnerability VCID-yk4c-9hbr-13dz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@1.0
1
url pkg:pypi/ansible-vault@1.0.0
purl pkg:pypi/ansible-vault@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-yk4c-9hbr-13dz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible-vault@1.0.0
2
url pkg:pypi/ansible-vault@1.0.1
purl pkg:pypi/ansible-vault@1.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-yk4c-9hbr-13dz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible-vault@1.0.1
3
url pkg:pypi/ansible-vault@1.0.2
purl pkg:pypi/ansible-vault@1.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-yk4c-9hbr-13dz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible-vault@1.0.2
4
url pkg:pypi/ansible-vault@1.0.3
purl pkg:pypi/ansible-vault@1.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-yk4c-9hbr-13dz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible-vault@1.0.3
5
url pkg:pypi/ansible-vault@1.0.4
purl pkg:pypi/ansible-vault@1.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-yk4c-9hbr-13dz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible-vault@1.0.4
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-2809
reference_id
reference_type
scores
0
value 0.00465
scoring_system epss
scoring_elements 0.64817
published_at 2026-06-11T12:55:00Z
1
value 0.00465
scoring_system epss
scoring_elements 0.64926
published_at 2026-06-14T12:55:00Z
2
value 0.00465
scoring_system epss
scoring_elements 0.6493
published_at 2026-06-13T12:55:00Z
3
value 0.00465
scoring_system epss
scoring_elements 0.64917
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-2809
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible-vault/PYSEC-2017-5.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible-vault/PYSEC-2017-5.yaml
2
reference_url https://github.com/tomoh1r/ansible-vault
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/tomoh1r/ansible-vault
3
reference_url https://github.com/tomoh1r/ansible-vault/blob/v1.0.5/CHANGES.txt
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/tomoh1r/ansible-vault/blob/v1.0.5/CHANGES.txt
4
reference_url https://github.com/tomoh1r/ansible-vault/commit/3f8f659ef443ab870bb19f95d43543470168ae04
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/tomoh1r/ansible-vault/commit/3f8f659ef443ab870bb19f95d43543470168ae04
5
reference_url https://github.com/tomoh1r/ansible-vault/issues/4
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/tomoh1r/ansible-vault/issues/4
6
reference_url https://web.archive.org/web/20171206173637/http://www.securityfocus.com/bid/100824
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20171206173637/http://www.securityfocus.com/bid/100824
7
reference_url https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0305
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0305
8
reference_url http://www.securityfocus.com/bid/100824
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/100824
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-2809
reference_id CVE-2017-2809
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-2809
10
reference_url https://github.com/advisories/GHSA-c2w9-48qc-qpj4
reference_id GHSA-c2w9-48qc-qpj4
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-c2w9-48qc-qpj4
Weaknesses
0
cwe_id 94
name Improper Control of Generation of Code ('Code Injection')
description The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
1
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 78
name Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
description The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-yk4c-9hbr-13dz