Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-has1-mf68-q3am
Summary
Improper Input Validation vulnerability in Apache Traffic Server with malformed HTTP/2 frames.This issue affects Apache Traffic Server: from 9.0.0 through 9.2.2.

Users are recommended to upgrade to version 9.2.3, which fixes the issue.
Aliases
0
alias CVE-2023-39456
Fixed_packages
0
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=riscv64&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=riscv64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=riscv64&distroversion=edge&reponame=community
1
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=aarch64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=aarch64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=aarch64&distroversion=v3.22&reponame=community
2
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86_64&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86_64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=x86_64&distroversion=edge&reponame=community
3
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=aarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=aarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=aarch64&distroversion=edge&reponame=community
4
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armhf&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armhf&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=armhf&distroversion=edge&reponame=community
5
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armv7&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armv7&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=armv7&distroversion=edge&reponame=community
6
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=loongarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=loongarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=loongarch64&distroversion=edge&reponame=community
7
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=ppc64le&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=ppc64le&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=ppc64le&distroversion=edge&reponame=community
8
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=s390x&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=s390x&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=s390x&distroversion=edge&reponame=community
9
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=x86&distroversion=edge&reponame=community
10
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=aarch64&distroversion=v3.21&reponame=community
11
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armhf&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armhf&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=armhf&distroversion=v3.21&reponame=community
12
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=ppc64le&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=ppc64le&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=ppc64le&distroversion=v3.21&reponame=community
13
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=riscv64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=riscv64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=riscv64&distroversion=v3.21&reponame=community
14
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86_64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86_64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=x86_64&distroversion=v3.21&reponame=community
15
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armhf&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armhf&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=armhf&distroversion=v3.23&reponame=community
16
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armv7&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armv7&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=armv7&distroversion=v3.23&reponame=community
17
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=loongarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=loongarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community
18
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=ppc64le&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=ppc64le&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=ppc64le&distroversion=v3.23&reponame=community
19
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armhf&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armhf&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=armhf&distroversion=v3.22&reponame=community
20
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armv7&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armv7&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=armv7&distroversion=v3.22&reponame=community
21
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=loongarch64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=loongarch64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=loongarch64&distroversion=v3.22&reponame=community
22
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=ppc64le&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=ppc64le&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=ppc64le&distroversion=v3.22&reponame=community
23
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=x86&distroversion=v3.22&reponame=community
24
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armv7&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=armv7&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=armv7&distroversion=v3.21&reponame=community
25
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=loongarch64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=loongarch64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=loongarch64&distroversion=v3.21&reponame=community
26
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=s390x&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=s390x&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=s390x&distroversion=v3.21&reponame=community
27
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=x86&distroversion=v3.21&reponame=community
28
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=aarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=aarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=aarch64&distroversion=v3.23&reponame=community
29
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=riscv64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=riscv64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=riscv64&distroversion=v3.23&reponame=community
30
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=s390x&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=s390x&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=s390x&distroversion=v3.23&reponame=community
31
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=x86&distroversion=v3.23&reponame=community
32
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86_64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86_64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=x86_64&distroversion=v3.23&reponame=community
33
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=riscv64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=riscv64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=riscv64&distroversion=v3.22&reponame=community
34
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=s390x&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=s390x&distroversion=v3.22&reponame=community
35
url pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86_64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.3-r0?arch=x86_64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.3-r0%3Farch=x86_64&distroversion=v3.22&reponame=community
36
url pkg:deb/debian/trafficserver@0?distro=sid
purl pkg:deb/debian/trafficserver@0?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@0%3Fdistro=sid
37
url pkg:deb/debian/trafficserver@8.1.10%2Bds-1~deb11u1?distro=sid
purl pkg:deb/debian/trafficserver@8.1.10%2Bds-1~deb11u1?distro=sid
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4738-xk8n-hbac
1
vulnerability VCID-4hs3-be7k-9qe7
2
vulnerability VCID-4uhe-mtbx-nfdu
3
vulnerability VCID-5e1r-3jec-tkhp
4
vulnerability VCID-c62p-6ghw-j3dv
5
vulnerability VCID-eay7-63um-43e9
6
vulnerability VCID-kjah-am9e-xkev
7
vulnerability VCID-tevw-8dcp-yfh6
8
vulnerability VCID-ww3t-p3pq-gkhy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@8.1.10%252Bds-1~deb11u1%3Fdistro=sid
38
url pkg:deb/debian/trafficserver@9.2.3%2Bds-1?distro=sid
purl pkg:deb/debian/trafficserver@9.2.3%2Bds-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@9.2.3%252Bds-1%3Fdistro=sid
39
url pkg:deb/debian/trafficserver@9.2.3%2Bds-1%2Bdeb12u1?distro=sid
purl pkg:deb/debian/trafficserver@9.2.3%2Bds-1%2Bdeb12u1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@9.2.3%252Bds-1%252Bdeb12u1%3Fdistro=sid
40
url pkg:deb/debian/trafficserver@9.2.5%2Bds-0%2Bdeb12u3?distro=sid
purl pkg:deb/debian/trafficserver@9.2.5%2Bds-0%2Bdeb12u3?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@9.2.5%252Bds-0%252Bdeb12u3%3Fdistro=sid
41
url pkg:deb/debian/trafficserver@9.2.5%2Bds-1?distro=sid
purl pkg:deb/debian/trafficserver@9.2.5%2Bds-1?distro=sid
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4738-xk8n-hbac
1
vulnerability VCID-4hs3-be7k-9qe7
2
vulnerability VCID-4uhe-mtbx-nfdu
3
vulnerability VCID-5e1r-3jec-tkhp
4
vulnerability VCID-c62p-6ghw-j3dv
5
vulnerability VCID-eay7-63um-43e9
6
vulnerability VCID-jabw-thzt-63bb
7
vulnerability VCID-kjah-am9e-xkev
8
vulnerability VCID-rcdg-j23x-xfbn
9
vulnerability VCID-tevw-8dcp-yfh6
10
vulnerability VCID-ww3t-p3pq-gkhy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@9.2.5%252Bds-1%3Fdistro=sid
Affected_packages
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-39456
reference_id
reference_type
scores
0
value 0.07335
scoring_system epss
scoring_elements 0.91664
published_at 2026-04-02T12:55:00Z
1
value 0.07335
scoring_system epss
scoring_elements 0.9167
published_at 2026-04-04T12:55:00Z
2
value 0.07335
scoring_system epss
scoring_elements 0.91679
published_at 2026-04-07T12:55:00Z
3
value 0.07335
scoring_system epss
scoring_elements 0.91691
published_at 2026-04-08T12:55:00Z
4
value 0.07335
scoring_system epss
scoring_elements 0.91698
published_at 2026-04-09T12:55:00Z
5
value 0.07335
scoring_system epss
scoring_elements 0.91702
published_at 2026-04-11T12:55:00Z
6
value 0.07335
scoring_system epss
scoring_elements 0.91704
published_at 2026-04-12T12:55:00Z
7
value 0.07335
scoring_system epss
scoring_elements 0.917
published_at 2026-04-13T12:55:00Z
8
value 0.07335
scoring_system epss
scoring_elements 0.91721
published_at 2026-04-16T12:55:00Z
9
value 0.07335
scoring_system epss
scoring_elements 0.91714
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-39456
1
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054427
reference_id 1054427
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054427
2
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
reference_id VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-13T19:44:04Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
Weaknesses
0
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Exploits
Severity_range_score7.5 - 7.5
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-has1-mf68-q3am