Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-ad6q-uvub-77ff
SummaryAn issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from 14.0 before 14.0.2. Improper access control allows unauthorised users to access project details using Graphql.
Aliases
0
alias CVE-2021-22228
Fixed_packages
0
url pkg:alpm/archlinux/gitlab@14.0.3-1
purl pkg:alpm/archlinux/gitlab@14.0.3-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/gitlab@14.0.3-1
1
url pkg:deb/debian/gitlab@15.10.8%2Bds1-2?distro=sid
purl pkg:deb/debian/gitlab@15.10.8%2Bds1-2?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gitlab@15.10.8%252Bds1-2%3Fdistro=sid
2
url pkg:deb/debian/gitlab@17.6.5-19?distro=sid
purl pkg:deb/debian/gitlab@17.6.5-19?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gitlab@17.6.5-19%3Fdistro=sid
Affected_packages
0
url pkg:alpm/archlinux/gitlab@14.0.1-1
purl pkg:alpm/archlinux/gitlab@14.0.1-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-55tn-dhah-8fak
1
vulnerability VCID-64wb-wrxa-afb2
2
vulnerability VCID-a1z8-2fdu-1uhd
3
vulnerability VCID-ad6q-uvub-77ff
4
vulnerability VCID-ewf1-jsf4-nqe8
5
vulnerability VCID-j2d6-26gv-j3f9
6
vulnerability VCID-ktjp-pvqu-5yf7
7
vulnerability VCID-p3g7-kade-fqfq
8
vulnerability VCID-s41d-jhp9-ckae
9
vulnerability VCID-ye5q-51wd-53c5
10
vulnerability VCID-yq7h-64jj-wfcs
11
vulnerability VCID-yx48-ptwa-ukhh
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/gitlab@14.0.1-1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22228
reference_id
reference_type
scores
0
value 0.00231
scoring_system epss
scoring_elements 0.45856
published_at 2026-04-24T12:55:00Z
1
value 0.00231
scoring_system epss
scoring_elements 0.45843
published_at 2026-04-01T12:55:00Z
2
value 0.00231
scoring_system epss
scoring_elements 0.45891
published_at 2026-04-02T12:55:00Z
3
value 0.00231
scoring_system epss
scoring_elements 0.45911
published_at 2026-04-04T12:55:00Z
4
value 0.00231
scoring_system epss
scoring_elements 0.45861
published_at 2026-04-07T12:55:00Z
5
value 0.00231
scoring_system epss
scoring_elements 0.45917
published_at 2026-04-08T12:55:00Z
6
value 0.00231
scoring_system epss
scoring_elements 0.45914
published_at 2026-04-09T12:55:00Z
7
value 0.00231
scoring_system epss
scoring_elements 0.45937
published_at 2026-04-11T12:55:00Z
8
value 0.00231
scoring_system epss
scoring_elements 0.45908
published_at 2026-04-12T12:55:00Z
9
value 0.00231
scoring_system epss
scoring_elements 0.45915
published_at 2026-04-13T12:55:00Z
10
value 0.00231
scoring_system epss
scoring_elements 0.45967
published_at 2026-04-16T12:55:00Z
11
value 0.00231
scoring_system epss
scoring_elements 0.45962
published_at 2026-04-18T12:55:00Z
12
value 0.00231
scoring_system epss
scoring_elements 0.45907
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22228
1
reference_url https://security.archlinux.org/ASA-202107-18
reference_id ASA-202107-18
reference_type
scores
url https://security.archlinux.org/ASA-202107-18
2
reference_url https://security.archlinux.org/AVG-2125
reference_id AVG-2125
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2125
Weaknesses
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-ad6q-uvub-77ff