Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/35048?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35048?format=api", "vulnerability_id": "VCID-upbz-vg19-rugv", "summary": "A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could redirect to any other domain, aka an open redirect vulnerability.", "aliases": [ { "alias": "CVE-2017-7234" }, { "alias": "GHSA-h4hv-m4h4-mhwg" }, { "alias": "PYSEC-2017-10" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9842?format=api", "purl": "pkg:pypi/django@1.8.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/9841?format=api", "purl": "pkg:pypi/django@1.9.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/9840?format=api", "purl": "pkg:pypi/django@1.10.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.7" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/8957?format=api", "purl": "pkg:pypi/django@1.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-d62f-7csz-fuhm" }, { "vulnerability": "VCID-jfya-694v-myar" }, { "vulnerability": "VCID-kq8u-td31-uqaa" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-mccp-khb9-qkb7" }, { "vulnerability": "VCID-n2eg-vn4k-yycf" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/8958?format=api", "purl": "pkg:pypi/django@1.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-d62f-7csz-fuhm" }, { "vulnerability": "VCID-jfya-694v-myar" }, { "vulnerability": "VCID-kq8u-td31-uqaa" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-mccp-khb9-qkb7" }, { "vulnerability": "VCID-n2eg-vn4k-yycf" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/8959?format=api", "purl": "pkg:pypi/django@1.8.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-d62f-7csz-fuhm" }, { "vulnerability": "VCID-jfya-694v-myar" }, { "vulnerability": "VCID-kq8u-td31-uqaa" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-mccp-khb9-qkb7" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/8999?format=api", "purl": "pkg:pypi/django@1.8.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-kq8u-td31-uqaa" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/9043?format=api", "purl": "pkg:pypi/django@1.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/9067?format=api", "purl": "pkg:pypi/django@1.8.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/9068?format=api", "purl": "pkg:pypi/django@1.8.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/9073?format=api", "purl": "pkg:pypi/django@1.8.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/9137?format=api", "purl": "pkg:pypi/django@1.8.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9138?format=api", "purl": "pkg:pypi/django@1.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/9139?format=api", "purl": "pkg:pypi/django@1.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/9246?format=api", "purl": "pkg:pypi/django@1.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/9247?format=api", "purl": "pkg:pypi/django@1.8.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/9248?format=api", "purl": "pkg:pypi/django@1.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/9255?format=api", "purl": "pkg:pypi/django@1.8.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/9440?format=api", "purl": "pkg:pypi/django@1.8.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/9457?format=api", "purl": "pkg:pypi/django@1.8.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/9835?format=api", "purl": "pkg:pypi/django@1.8.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/9134?format=api", "purl": "pkg:pypi/django@1.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2yaw-hhv6-fygg" }, { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/9135?format=api", "purl": "pkg:pypi/django@1.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2yaw-hhv6-fygg" }, { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/9136?format=api", "purl": "pkg:pypi/django@1.9.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/9140?format=api", "purl": "pkg:pypi/django@1.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/9249?format=api", "purl": "pkg:pypi/django@1.9.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/9250?format=api", "purl": "pkg:pypi/django@1.9.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/9251?format=api", "purl": "pkg:pypi/django@1.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/9252?format=api", "purl": "pkg:pypi/django@1.9.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/9256?format=api", "purl": "pkg:pypi/django@1.9.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9439?format=api", "purl": "pkg:pypi/django@1.9.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/9441?format=api", "purl": "pkg:pypi/django@1.9.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/9458?format=api", "purl": "pkg:pypi/django@1.9.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/9836?format=api", "purl": "pkg:pypi/django@1.9.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/9454?format=api", "purl": "pkg:pypi/django@1.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/9455?format=api", "purl": "pkg:pypi/django@1.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/9456?format=api", "purl": "pkg:pypi/django@1.10.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/9459?format=api", "purl": "pkg:pypi/django@1.10.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/9837?format=api", "purl": "pkg:pypi/django@1.10.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/9838?format=api", "purl": "pkg:pypi/django@1.10.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/9839?format=api", "purl": "pkg:pypi/django@1.10.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.6" } ], "references": [ { "reference_url": "https://github.com/advisories/GHSA-h4hv-m4h4-mhwg", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-h4hv-m4h4-mhwg" }, { "reference_url": "https://github.com/django/django", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/django/django" }, { "reference_url": "https://github.com/django/django/commit/2a9f6ef71b8e23fd267ee2be1be26dde8ab67037", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/django/django/commit/2a9f6ef71b8e23fd267ee2be1be26dde8ab67037" }, { "reference_url": "https://github.com/django/django/commit/4a6b945dffe8d10e7cec107d93e6efaebfbded29", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/django/django/commit/4a6b945dffe8d10e7cec107d93e6efaebfbded29" }, { "reference_url": "https://github.com/django/django/commit/5f1ffb07afc1e59729ce2b283124116d6c0659e4", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/django/django/commit/5f1ffb07afc1e59729ce2b283124116d6c0659e4" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2017-10.yaml", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2017-10.yaml" }, { "reference_url": "https://web.archive.org/web/20170429023907/http://www.securitytracker.com/id/1038177", "reference_id": "", "reference_type": "", "scores": [], "url": "https://web.archive.org/web/20170429023907/http://www.securitytracker.com/id/1038177" }, { "reference_url": "https://web.archive.org/web/20170526042328/http://www.securityfocus.com/bid/97401", "reference_id": "", "reference_type": "", "scores": [], "url": "https://web.archive.org/web/20170526042328/http://www.securityfocus.com/bid/97401" }, { "reference_url": "https://www.djangoproject.com/weblog/2017/apr/04/security-releases", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.djangoproject.com/weblog/2017/apr/04/security-releases" }, { "reference_url": "https://www.djangoproject.com/weblog/2017/apr/04/security-releases/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.djangoproject.com/weblog/2017/apr/04/security-releases/" }, { "reference_url": "http://www.debian.org/security/2017/dsa-3835", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.debian.org/security/2017/dsa-3835" }, { "reference_url": "http://www.securityfocus.com/bid/97401", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/97401" }, { "reference_url": "http://www.securitytracker.com/id/1038177", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id/1038177" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7234", "reference_id": "CVE-2017-7234", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7234" } ], "weaknesses": [ { "cwe_id": 601, "name": "URL Redirection to Untrusted Site ('Open Redirect')", "description": "A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." } ], "exploits": [], "severity_range_score": null, "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-upbz-vg19-rugv" }