Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-85dg-y8nr-n3b9
Summary
Phlex XSS protection bypass via attribute splatting, dynamic tags, and href values
During a security audit conducted with Claude Opus 4.6 and GPT-5.3-Codex, we identified three specific ways to bypass the XSS (cross-site-scripting) protection built into Phlex.

1. The first bypass could happen if user-provided attributes with string keys were splatted into HTML tag, e.g. `div(**user_attributes)`.
2. The second bypass could happen if user-provided tag names were passed to the `tag` method, e.g. `tag(some_tag_name_from_user)`.
3. The third bypass could happen if user’s links were passed to `href` attributes, e.g. `a(href: user_provided_link)`.

All three of these patterns are meant to be safe and all have now been patched.
Aliases
0
alias GHSA-w67g-2h6v-vjgq
Fixed_packages
0
url pkg:gem/phlex@1.11.1
purl pkg:gem/phlex@1.11.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.11.1
1
url pkg:gem/phlex@2.0.2
purl pkg:gem/phlex@2.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.0.2
2
url pkg:gem/phlex@2.1.3
purl pkg:gem/phlex@2.1.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.1.3
3
url pkg:gem/phlex@2.2.2
purl pkg:gem/phlex@2.2.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.2.2
4
url pkg:gem/phlex@2.3.2
purl pkg:gem/phlex@2.3.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.3.2
5
url pkg:gem/phlex@2.4.0.beta1
purl pkg:gem/phlex@2.4.0.beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.4.0.beta1
6
url pkg:gem/phlex@2.4.1
purl pkg:gem/phlex@2.4.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.4.1
Affected_packages
0
url pkg:gem/phlex@0.1.0
purl pkg:gem/phlex@0.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@0.1.0
1
url pkg:gem/phlex@0.2.0
purl pkg:gem/phlex@0.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@0.2.0
2
url pkg:gem/phlex@0.2.1
purl pkg:gem/phlex@0.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@0.2.1
3
url pkg:gem/phlex@0.2.2
purl pkg:gem/phlex@0.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@0.2.2
4
url pkg:gem/phlex@0.3.0
purl pkg:gem/phlex@0.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@0.3.0
5
url pkg:gem/phlex@0.3.1
purl pkg:gem/phlex@0.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@0.3.1
6
url pkg:gem/phlex@0.3.2
purl pkg:gem/phlex@0.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@0.3.2
7
url pkg:gem/phlex@0.4.0
purl pkg:gem/phlex@0.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@0.4.0
8
url pkg:gem/phlex@0.5.0
purl pkg:gem/phlex@0.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@0.5.0
9
url pkg:gem/phlex@0.5.1
purl pkg:gem/phlex@0.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@0.5.1
10
url pkg:gem/phlex@0.5.2
purl pkg:gem/phlex@0.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@0.5.2
11
url pkg:gem/phlex@0.5.3
purl pkg:gem/phlex@0.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@0.5.3
12
url pkg:gem/phlex@1.0.0.rc1
purl pkg:gem/phlex@1.0.0.rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.0.0.rc1
13
url pkg:gem/phlex@1.0.0.rc2
purl pkg:gem/phlex@1.0.0.rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.0.0.rc2
14
url pkg:gem/phlex@1.0.0
purl pkg:gem/phlex@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.0.0
15
url pkg:gem/phlex@1.0.1
purl pkg:gem/phlex@1.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.0.1
16
url pkg:gem/phlex@1.1.0
purl pkg:gem/phlex@1.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.1.0
17
url pkg:gem/phlex@1.1.1
purl pkg:gem/phlex@1.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.1.1
18
url pkg:gem/phlex@1.2.0
purl pkg:gem/phlex@1.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.2.0
19
url pkg:gem/phlex@1.2.1
purl pkg:gem/phlex@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.2.1
20
url pkg:gem/phlex@1.2.2
purl pkg:gem/phlex@1.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.2.2
21
url pkg:gem/phlex@1.3.0
purl pkg:gem/phlex@1.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.3.0
22
url pkg:gem/phlex@1.3.1
purl pkg:gem/phlex@1.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.3.1
23
url pkg:gem/phlex@1.3.2
purl pkg:gem/phlex@1.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.3.2
24
url pkg:gem/phlex@1.3.3
purl pkg:gem/phlex@1.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.3.3
25
url pkg:gem/phlex@1.4.0
purl pkg:gem/phlex@1.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.4.0
26
url pkg:gem/phlex@1.4.1
purl pkg:gem/phlex@1.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.4.1
27
url pkg:gem/phlex@1.4.2
purl pkg:gem/phlex@1.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.4.2
28
url pkg:gem/phlex@1.5.0
purl pkg:gem/phlex@1.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.5.0
29
url pkg:gem/phlex@1.5.1
purl pkg:gem/phlex@1.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.5.1
30
url pkg:gem/phlex@1.5.2
purl pkg:gem/phlex@1.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.5.2
31
url pkg:gem/phlex@1.5.3
purl pkg:gem/phlex@1.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.5.3
32
url pkg:gem/phlex@1.6.0
purl pkg:gem/phlex@1.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.6.0
33
url pkg:gem/phlex@1.6.1
purl pkg:gem/phlex@1.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.6.1
34
url pkg:gem/phlex@1.6.2
purl pkg:gem/phlex@1.6.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.6.2
35
url pkg:gem/phlex@1.6.3
purl pkg:gem/phlex@1.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.6.3
36
url pkg:gem/phlex@1.7.0
purl pkg:gem/phlex@1.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.7.0
37
url pkg:gem/phlex@1.7.1
purl pkg:gem/phlex@1.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.7.1
38
url pkg:gem/phlex@1.7.2
purl pkg:gem/phlex@1.7.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.7.2
39
url pkg:gem/phlex@1.8.0
purl pkg:gem/phlex@1.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.8.0
40
url pkg:gem/phlex@1.8.1
purl pkg:gem/phlex@1.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.8.1
41
url pkg:gem/phlex@1.8.2
purl pkg:gem/phlex@1.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.8.2
42
url pkg:gem/phlex@1.8.3
purl pkg:gem/phlex@1.8.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.8.3
43
url pkg:gem/phlex@1.9.0
purl pkg:gem/phlex@1.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.9.0
44
url pkg:gem/phlex@1.9.1
purl pkg:gem/phlex@1.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-ec9a-dkz3-ebat
3
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.9.1
45
url pkg:gem/phlex@1.9.2
purl pkg:gem/phlex@1.9.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.9.2
46
url pkg:gem/phlex@1.9.3
purl pkg:gem/phlex@1.9.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.9.3
47
url pkg:gem/phlex@1.10.0
purl pkg:gem/phlex@1.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-chd9-zt4b-3fey
2
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.10.0
48
url pkg:gem/phlex@1.10.1
purl pkg:gem/phlex@1.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.10.1
49
url pkg:gem/phlex@1.10.2
purl pkg:gem/phlex@1.10.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
1
vulnerability VCID-rnfm-q1jm-jyf2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.10.2
50
url pkg:gem/phlex@1.10.3
purl pkg:gem/phlex@1.10.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.10.3
51
url pkg:gem/phlex@1.11.0
purl pkg:gem/phlex@1.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.11.0
52
url pkg:gem/phlex@1.12
purl pkg:gem/phlex@1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@1.12
53
url pkg:gem/phlex@2.0.0.beta1
purl pkg:gem/phlex@2.0.0.beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.0.0.beta1
54
url pkg:gem/phlex@2.0.0.beta2
purl pkg:gem/phlex@2.0.0.beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.0.0.beta2
55
url pkg:gem/phlex@2.0.0.rc1
purl pkg:gem/phlex@2.0.0.rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.0.0.rc1
56
url pkg:gem/phlex@2.0.0.rc2
purl pkg:gem/phlex@2.0.0.rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.0.0.rc2
57
url pkg:gem/phlex@2.0.0
purl pkg:gem/phlex@2.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.0.0
58
url pkg:gem/phlex@2.0.1
purl pkg:gem/phlex@2.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.0.1
59
url pkg:gem/phlex@2.0.2
purl pkg:gem/phlex@2.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.0.2
60
url pkg:gem/phlex@2.1
purl pkg:gem/phlex@2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.1
61
url pkg:gem/phlex@2.1.0
purl pkg:gem/phlex@2.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.1.0
62
url pkg:gem/phlex@2.1.1
purl pkg:gem/phlex@2.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.1.1
63
url pkg:gem/phlex@2.1.2
purl pkg:gem/phlex@2.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.1.2
64
url pkg:gem/phlex@2.2
purl pkg:gem/phlex@2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.2
65
url pkg:gem/phlex@2.2.0
purl pkg:gem/phlex@2.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.2.0
66
url pkg:gem/phlex@2.2.1
purl pkg:gem/phlex@2.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.2.1
67
url pkg:gem/phlex@2.3
purl pkg:gem/phlex@2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.3
68
url pkg:gem/phlex@2.3.0
purl pkg:gem/phlex@2.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.3.0
69
url pkg:gem/phlex@2.3.1
purl pkg:gem/phlex@2.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.3.1
70
url pkg:gem/phlex@2.4.0.beta1
purl pkg:gem/phlex@2.4.0.beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.4.0.beta1
71
url pkg:gem/phlex@2.4.0.beta2
purl pkg:gem/phlex@2.4.0.beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.4.0.beta2
72
url pkg:gem/phlex@2.4
purl pkg:gem/phlex@2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.4
73
url pkg:gem/phlex@2.4.0
purl pkg:gem/phlex@2.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dg-y8nr-n3b9
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/phlex@2.4.0
References
0
reference_url https://github.com/yippee-fun/phlex
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/yippee-fun/phlex
1
reference_url https://github.com/yippee-fun/phlex/commit/1d85da417cb15eb8cb2f54a68d531c9b35d9d03a
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/yippee-fun/phlex/commit/1d85da417cb15eb8cb2f54a68d531c9b35d9d03a
2
reference_url https://github.com/yippee-fun/phlex/commit/556441d5a64ff93f749e8116a05b2d97264468ee
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/yippee-fun/phlex/commit/556441d5a64ff93f749e8116a05b2d97264468ee
3
reference_url https://github.com/yippee-fun/phlex/commit/74e3d8610ffabc2cf5f241945e9df4b14dceb97d
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/yippee-fun/phlex/commit/74e3d8610ffabc2cf5f241945e9df4b14dceb97d
4
reference_url https://github.com/yippee-fun/phlex/commit/9f56ad13bea9a7d6117fdfd510446c890709eeac
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/yippee-fun/phlex/commit/9f56ad13bea9a7d6117fdfd510446c890709eeac
5
reference_url https://github.com/yippee-fun/phlex/commit/fe9ea708672f9fa42526d9b47e1cdc4634860ef1
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/yippee-fun/phlex/commit/fe9ea708672f9fa42526d9b47e1cdc4634860ef1
6
reference_url https://github.com/advisories/GHSA-w67g-2h6v-vjgq
reference_id GHSA-w67g-2h6v-vjgq
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w67g-2h6v-vjgq
7
reference_url https://github.com/yippee-fun/phlex/security/advisories/GHSA-w67g-2h6v-vjgq
reference_id GHSA-w67g-2h6v-vjgq
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements
1
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
2
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/yippee-fun/phlex/security/advisories/GHSA-w67g-2h6v-vjgq
Weaknesses
0
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-85dg-y8nr-n3b9