Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-8kj7-du9v-uugw
SummaryHKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.
Aliases
0
alias CVE-2016-9243
1
alias GHSA-q3cj-2r34-2cwc
2
alias PYSEC-2017-8
Fixed_packages
0
url pkg:deb/debian/python-cryptography@1.5.3-1?distro=trixie
purl pkg:deb/debian/python-cryptography@1.5.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@1.5.3-1%3Fdistro=trixie
1
url pkg:deb/debian/python-cryptography@3.3.2-1?distro=trixie
purl pkg:deb/debian/python-cryptography@3.3.2-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ac2f-9mbb-pyeh
1
vulnerability VCID-gyar-9xau-nba1
2
vulnerability VCID-jksg-v3x3-z3d3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@3.3.2-1%3Fdistro=trixie
2
url pkg:deb/debian/python-cryptography@38.0.4-3%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/python-cryptography@38.0.4-3%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ac2f-9mbb-pyeh
1
vulnerability VCID-gyar-9xau-nba1
2
vulnerability VCID-jksg-v3x3-z3d3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@38.0.4-3%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/python-cryptography@43.0.0-3%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/python-cryptography@43.0.0-3%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jksg-v3x3-z3d3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@43.0.0-3%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/python-cryptography@46.0.7-1?distro=trixie
purl pkg:deb/debian/python-cryptography@46.0.7-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@46.0.7-1%3Fdistro=trixie
5
url pkg:pypi/cryptography@1.5.3
purl pkg:pypi/cryptography@1.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jksg-v3x3-z3d3
1
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.5.3
Affected_packages
0
url pkg:pypi/cryptography@0.1
purl pkg:pypi/cryptography@0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.1
1
url pkg:pypi/cryptography@0.2
purl pkg:pypi/cryptography@0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.2
2
url pkg:pypi/cryptography@0.2.1
purl pkg:pypi/cryptography@0.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.2.1
3
url pkg:pypi/cryptography@0.2.2
purl pkg:pypi/cryptography@0.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.2.2
4
url pkg:pypi/cryptography@0.3
purl pkg:pypi/cryptography@0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.3
5
url pkg:pypi/cryptography@0.4
purl pkg:pypi/cryptography@0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.4
6
url pkg:pypi/cryptography@0.5
purl pkg:pypi/cryptography@0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-78m5-9977-afbh
1
vulnerability VCID-8kj7-du9v-uugw
2
vulnerability VCID-jksg-v3x3-z3d3
3
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.5
7
url pkg:pypi/cryptography@0.5.1
purl pkg:pypi/cryptography@0.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.5.1
8
url pkg:pypi/cryptography@0.5.2
purl pkg:pypi/cryptography@0.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.5.2
9
url pkg:pypi/cryptography@0.5.3
purl pkg:pypi/cryptography@0.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.5.3
10
url pkg:pypi/cryptography@0.5.4
purl pkg:pypi/cryptography@0.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.5.4
11
url pkg:pypi/cryptography@0.6
purl pkg:pypi/cryptography@0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.6
12
url pkg:pypi/cryptography@0.6.1
purl pkg:pypi/cryptography@0.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.6.1
13
url pkg:pypi/cryptography@0.7
purl pkg:pypi/cryptography@0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.7
14
url pkg:pypi/cryptography@0.7.1
purl pkg:pypi/cryptography@0.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.7.1
15
url pkg:pypi/cryptography@0.7.2
purl pkg:pypi/cryptography@0.7.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.7.2
16
url pkg:pypi/cryptography@0.8
purl pkg:pypi/cryptography@0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-aqvw-1swj-rqdz
2
vulnerability VCID-jksg-v3x3-z3d3
3
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.8
17
url pkg:pypi/cryptography@0.8.1
purl pkg:pypi/cryptography@0.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-ts7c-u8g2-rqa4
3
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.8.1
18
url pkg:pypi/cryptography@0.8.2
purl pkg:pypi/cryptography@0.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.8.2
19
url pkg:pypi/cryptography@0.9
purl pkg:pypi/cryptography@0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.9
20
url pkg:pypi/cryptography@0.9.1
purl pkg:pypi/cryptography@0.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.9.1
21
url pkg:pypi/cryptography@0.9.2
purl pkg:pypi/cryptography@0.9.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.9.2
22
url pkg:pypi/cryptography@0.9.3
purl pkg:pypi/cryptography@0.9.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.9.3
23
url pkg:pypi/cryptography@1.0
purl pkg:pypi/cryptography@1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.0
24
url pkg:pypi/cryptography@1.0.1
purl pkg:pypi/cryptography@1.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.0.1
25
url pkg:pypi/cryptography@1.0.2
purl pkg:pypi/cryptography@1.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.0.2
26
url pkg:pypi/cryptography@1.1
purl pkg:pypi/cryptography@1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.1
27
url pkg:pypi/cryptography@1.1.1
purl pkg:pypi/cryptography@1.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.1.1
28
url pkg:pypi/cryptography@1.1.2
purl pkg:pypi/cryptography@1.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.1.2
29
url pkg:pypi/cryptography@1.2
purl pkg:pypi/cryptography@1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.2
30
url pkg:pypi/cryptography@1.2.1
purl pkg:pypi/cryptography@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.2.1
31
url pkg:pypi/cryptography@1.2.2
purl pkg:pypi/cryptography@1.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.2.2
32
url pkg:pypi/cryptography@1.2.3
purl pkg:pypi/cryptography@1.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.2.3
33
url pkg:pypi/cryptography@1.3
purl pkg:pypi/cryptography@1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.3
34
url pkg:pypi/cryptography@1.3.1
purl pkg:pypi/cryptography@1.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.3.1
35
url pkg:pypi/cryptography@1.3.2
purl pkg:pypi/cryptography@1.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.3.2
36
url pkg:pypi/cryptography@1.3.3
purl pkg:pypi/cryptography@1.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.3.3
37
url pkg:pypi/cryptography@1.3.4
purl pkg:pypi/cryptography@1.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.3.4
38
url pkg:pypi/cryptography@1.4
purl pkg:pypi/cryptography@1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.4
39
url pkg:pypi/cryptography@1.5
purl pkg:pypi/cryptography@1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.5
40
url pkg:pypi/cryptography@1.5.1
purl pkg:pypi/cryptography@1.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.5.1
41
url pkg:pypi/cryptography@1.5.2
purl pkg:pypi/cryptography@1.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8kj7-du9v-uugw
1
vulnerability VCID-jksg-v3x3-z3d3
2
vulnerability VCID-v56n-dpyv-rug7
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.5.2
References
0
reference_url https://cryptography.io/en/latest/changelog
reference_id
reference_type
scores
url https://cryptography.io/en/latest/changelog
1
reference_url https://github.com/advisories/GHSA-q3cj-2r34-2cwc
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-q3cj-2r34-2cwc
2
reference_url https://github.com/pyca/cryptography/commit/b924696b2e8731f39696584d12cceeb3aeb2d874
reference_id
reference_type
scores
url https://github.com/pyca/cryptography/commit/b924696b2e8731f39696584d12cceeb3aeb2d874
3
reference_url https://github.com/pyca/cryptography/issues/3211
reference_id
reference_type
scores
url https://github.com/pyca/cryptography/issues/3211
4
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R2ZOBMPWDFFHUZ6QOZZY36A6H5CGJXL/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R2ZOBMPWDFFHUZ6QOZZY36A6H5CGJXL/
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U23KDR2M2N7W2ZSREG63BVW7D4VC6CIZ/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U23KDR2M2N7W2ZSREG63BVW7D4VC6CIZ/
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQ5G7KHKZC4SI23JE7277KZXM57GEQKT/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQ5G7KHKZC4SI23JE7277KZXM57GEQKT/
7
reference_url http://www.openwall.com/lists/oss-security/2016/11/09/2
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/11/09/2
8
reference_url http://www.securityfocus.com/bid/94216
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/94216
9
reference_url http://www.ubuntu.com/usn/USN-3138-1
reference_id
reference_type
scores
url http://www.ubuntu.com/usn/USN-3138-1
Weaknesses
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-8kj7-du9v-uugw