Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-4t4e-47cq-2ffx
Summary
Withdrawn: ESLint dependencies are vulnerable (ReDoS and Prototype Pollution)
**Withdrawn**
GitHub has withdrawn this advisory in place of GHSA-vh95-rmgr-6w4m and GHSA-6chw-6frg-f759.
The reason for withdrawing is that some mistakes were made during the ingestion of CVE-2020-7598
which caused this advisory to be published with incorrect information.

In order to provide accurate advisory information, new advisories were created:

- minimist: https://github.com/advisories/GHSA-vh95-rmgr-6w4m
- acorn: https://github.com/advisories/GHSA-6chw-6frg-f759
Aliases
0
alias GHSA-7fhm-mqm4-2wp7
Fixed_packages
0
url pkg:npm/acorn@5.7.4
purl pkg:npm/acorn@5.7.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/acorn@5.7.4
1
url pkg:npm/acorn@6.4.1
purl pkg:npm/acorn@6.4.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/acorn@6.4.1
2
url pkg:npm/acorn@7.1.1
purl pkg:npm/acorn@7.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/acorn@7.1.1
3
url pkg:npm/minimist@1.2.2
purl pkg:npm/minimist@1.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bhnm-47u8-zfhr
1
vulnerability VCID-turp-dju7-c7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/minimist@1.2.2
Affected_packages
0
url pkg:npm/acorn@6.0.0
purl pkg:npm/acorn@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4t4e-47cq-2ffx
1
vulnerability VCID-9eyp-2a6k-xya4
2
vulnerability VCID-znj9-9zem-s3c9
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/acorn@6.0.0
1
url pkg:npm/acorn@7.0.0
purl pkg:npm/acorn@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4t4e-47cq-2ffx
1
vulnerability VCID-9eyp-2a6k-xya4
2
vulnerability VCID-znj9-9zem-s3c9
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/acorn@7.0.0
References
0
reference_url https://github.com/advisories/GHSA-6chw-6frg-f759
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-6chw-6frg-f759
1
reference_url https://github.com/advisories/GHSA-vh95-rmgr-6w4m
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-vh95-rmgr-6w4m
2
reference_url https://github.com/advisories/GHSA-7fhm-mqm4-2wp7
reference_id GHSA-7fhm-mqm4-2wp7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7fhm-mqm4-2wp7
Weaknesses
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-4t4e-47cq-2ffx