Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/35050?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35050?format=api", "vulnerability_id": "VCID-rruq-9scz-vbg8", "summary": "Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an \"on success\" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs \"safe\" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack.", "aliases": [ { "alias": "CVE-2017-7233" }, { "alias": "GHSA-37hp-765x-j95x" }, { "alias": "PYSEC-2017-9" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9842?format=api", "purl": "pkg:pypi/django@1.8.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/9841?format=api", "purl": "pkg:pypi/django@1.9.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/9840?format=api", "purl": "pkg:pypi/django@1.10.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.7" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/8794?format=api", "purl": "pkg:pypi/django@1.8a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-bahz-gfxv-e3b2" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-u6sd-648r-qbdb" }, { "vulnerability": "VCID-vacy-878s-3kfb" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/8957?format=api", "purl": "pkg:pypi/django@1.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-d62f-7csz-fuhm" }, { "vulnerability": "VCID-jfya-694v-myar" }, { "vulnerability": "VCID-kq8u-td31-uqaa" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-mccp-khb9-qkb7" }, { "vulnerability": "VCID-n2eg-vn4k-yycf" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/8958?format=api", "purl": "pkg:pypi/django@1.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-d62f-7csz-fuhm" }, { "vulnerability": "VCID-jfya-694v-myar" }, { "vulnerability": "VCID-kq8u-td31-uqaa" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-mccp-khb9-qkb7" }, { "vulnerability": "VCID-n2eg-vn4k-yycf" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/8959?format=api", "purl": "pkg:pypi/django@1.8.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-d62f-7csz-fuhm" }, { "vulnerability": "VCID-jfya-694v-myar" }, { "vulnerability": "VCID-kq8u-td31-uqaa" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-mccp-khb9-qkb7" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/8999?format=api", "purl": "pkg:pypi/django@1.8.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-kq8u-td31-uqaa" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/9043?format=api", "purl": "pkg:pypi/django@1.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/9067?format=api", "purl": "pkg:pypi/django@1.8.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/9068?format=api", "purl": "pkg:pypi/django@1.8.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/9073?format=api", "purl": "pkg:pypi/django@1.8.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/9137?format=api", "purl": "pkg:pypi/django@1.8.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9138?format=api", "purl": "pkg:pypi/django@1.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/9139?format=api", "purl": "pkg:pypi/django@1.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/9246?format=api", "purl": "pkg:pypi/django@1.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/9247?format=api", "purl": "pkg:pypi/django@1.8.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/9248?format=api", "purl": "pkg:pypi/django@1.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/9255?format=api", "purl": "pkg:pypi/django@1.8.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/9440?format=api", "purl": "pkg:pypi/django@1.8.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/9457?format=api", "purl": "pkg:pypi/django@1.8.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/9835?format=api", "purl": "pkg:pypi/django@1.8.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/9069?format=api", "purl": "pkg:pypi/django@1.9a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/9134?format=api", "purl": "pkg:pypi/django@1.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2yaw-hhv6-fygg" }, { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/9135?format=api", "purl": "pkg:pypi/django@1.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2yaw-hhv6-fygg" }, { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/9136?format=api", "purl": "pkg:pypi/django@1.9.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/9140?format=api", "purl": "pkg:pypi/django@1.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/9249?format=api", "purl": "pkg:pypi/django@1.9.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/9250?format=api", "purl": "pkg:pypi/django@1.9.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/9251?format=api", "purl": "pkg:pypi/django@1.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/9252?format=api", "purl": "pkg:pypi/django@1.9.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/9256?format=api", "purl": "pkg:pypi/django@1.9.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9439?format=api", "purl": "pkg:pypi/django@1.9.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/9441?format=api", "purl": "pkg:pypi/django@1.9.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/9458?format=api", "purl": "pkg:pypi/django@1.9.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/9836?format=api", "purl": "pkg:pypi/django@1.9.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.9.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/9253?format=api", "purl": "pkg:pypi/django@1.10a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/9454?format=api", "purl": "pkg:pypi/django@1.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/9455?format=api", "purl": "pkg:pypi/django@1.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/9456?format=api", "purl": "pkg:pypi/django@1.10.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/9459?format=api", "purl": "pkg:pypi/django@1.10.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/9837?format=api", "purl": "pkg:pypi/django@1.10.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/9838?format=api", "purl": "pkg:pypi/django@1.10.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/9839?format=api", "purl": "pkg:pypi/django@1.10.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-hpj4-a9fa-4bca" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.10.6" } ], "references": [ { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1445", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1445" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1451", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1451" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1462", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1462" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1470", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1470" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1596", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1596" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3093", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:3093" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2927", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2927" }, { "reference_url": "https://github.com/advisories/GHSA-37hp-765x-j95x", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-37hp-765x-j95x" }, { "reference_url": "https://github.com/django/django", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/django/django" }, { "reference_url": "https://github.com/django/django/commit/254326cb3682389f55f886804d2c43f7b9f23e4f", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/django/django/commit/254326cb3682389f55f886804d2c43f7b9f23e4f" }, { "reference_url": "https://github.com/django/django/commit/8339277518c7d8ec280070a780915304654e3b66", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/django/django/commit/8339277518c7d8ec280070a780915304654e3b66" }, { "reference_url": "https://github.com/django/django/commit/f824655bc2c50b19d2f202d7640785caabc82787", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/django/django/commit/f824655bc2c50b19d2f202d7640785caabc82787" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2017-9.yaml", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2017-9.yaml" }, { "reference_url": "https://www.djangoproject.com/weblog/2017/apr/04/security-releases", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.djangoproject.com/weblog/2017/apr/04/security-releases" }, { "reference_url": "https://www.djangoproject.com/weblog/2017/apr/04/security-releases/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.djangoproject.com/weblog/2017/apr/04/security-releases/" }, { "reference_url": "http://www.debian.org/security/2017/dsa-3835", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.debian.org/security/2017/dsa-3835" }, { "reference_url": "http://www.securityfocus.com/bid/97406", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/97406" }, { "reference_url": "http://www.securitytracker.com/id/1038177", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id/1038177" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7233", "reference_id": "CVE-2017-7233", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7233" } ], "weaknesses": [ { "cwe_id": 601, "name": "URL Redirection to Untrusted Site ('Open Redirect')", "description": "A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." } ], "exploits": [], "severity_range_score": null, "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rruq-9scz-vbg8" }