Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/35312?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35312?format=api", "vulnerability_id": "VCID-7zef-tgy9-kkh6", "summary": "The LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1.10.1 was misconfigured and contained improper checking of exceptions which disabled server certificate checking.", "aliases": [ { "alias": "CVE-2018-20245" }, { "alias": "GHSA-77rc-x84q-pv4f" }, { "alias": "PYSEC-2019-143" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/12747?format=api", "purl": "pkg:pypi/apache-airflow@1.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2fnz-jqpe-nuau" }, { "vulnerability": "VCID-2xr2-w3hk-auck" }, { "vulnerability": "VCID-2ysx-9hz5-fyfm" }, { "vulnerability": "VCID-3h3z-bfsc-jqax" }, { "vulnerability": "VCID-4dpy-dzpr-bbg7" }, { "vulnerability": "VCID-4ga6-4111-dyc9" }, { "vulnerability": "VCID-4xax-xw67-2qfv" }, { "vulnerability": "VCID-4xdb-1kww-sfdh" }, { "vulnerability": "VCID-56eq-awhd-d3fr" }, { "vulnerability": "VCID-5cpd-kjpb-ekhv" }, { "vulnerability": "VCID-5yxa-ubfq-fqdx" }, { "vulnerability": "VCID-5zmy-2ape-7qfa" }, { "vulnerability": "VCID-6c7g-ws6x-yygu" }, { "vulnerability": "VCID-6gjt-zsju-47a3" }, { "vulnerability": "VCID-6ksf-tekv-dud3" }, { "vulnerability": "VCID-6vg9-hu9u-q7c3" }, { "vulnerability": "VCID-71hr-1ews-9qa6" }, { "vulnerability": "VCID-82kk-s7d6-f7he" }, { "vulnerability": "VCID-835a-arqz-g7h7" }, { "vulnerability": "VCID-91n6-evww-zybp" }, { "vulnerability": "VCID-98yf-mvnw-d3b4" }, { "vulnerability": "VCID-9jm4-t1je-vqhm" }, { "vulnerability": "VCID-9tq4-v733-hug3" }, { "vulnerability": "VCID-amac-hqnj-xfgz" }, { "vulnerability": "VCID-b3w3-h9cm-ufgm" }, { "vulnerability": "VCID-bwd5-3jt5-pyb8" }, { "vulnerability": "VCID-cahz-4dy7-bbe9" }, { "vulnerability": "VCID-dh4r-77xc-cbas" }, { "vulnerability": "VCID-due7-n14c-akfx" }, { "vulnerability": "VCID-ez45-qkb4-xkba" }, { "vulnerability": "VCID-fbjk-2uvy-mqfc" }, { "vulnerability": "VCID-frbp-mhhr-8bdt" }, { "vulnerability": "VCID-gn6e-a1yp-g7dw" }, { "vulnerability": "VCID-gz6e-b7dz-5qdf" }, { "vulnerability": "VCID-h6sp-398p-pbeg" }, { "vulnerability": "VCID-hah6-e5fc-juc5" }, { "vulnerability": "VCID-hy75-nfg7-zfae" }, { "vulnerability": "VCID-j86y-n37n-n7ft" }, { "vulnerability": "VCID-jq98-gxbc-pydt" }, { "vulnerability": "VCID-kh46-xrgm-9udx" }, { "vulnerability": "VCID-ks8d-9vr8-4feh" }, { "vulnerability": "VCID-mcbu-b45m-k3ck" }, { "vulnerability": "VCID-njyy-ywer-x7bf" }, { "vulnerability": "VCID-p9we-cpy2-17h4" }, { "vulnerability": "VCID-pe8h-9hgu-j3hx" }, { "vulnerability": "VCID-pybp-gfy8-2qcr" }, { "vulnerability": "VCID-pypb-cezm-rkb2" }, { "vulnerability": "VCID-q83y-d2x7-m7hv" }, { "vulnerability": "VCID-q84t-8dac-93dm" }, { "vulnerability": "VCID-qehu-58hj-67gn" }, { "vulnerability": "VCID-qmpd-946c-gqbc" }, { "vulnerability": "VCID-qr9h-6dg8-gkh3" }, { "vulnerability": "VCID-quaj-w9r3-qya8" }, { "vulnerability": "VCID-reu2-2xcq-fqa4" }, { "vulnerability": "VCID-ryct-uaw3-fyfc" }, { "vulnerability": "VCID-suwt-h1ze-mydu" }, { "vulnerability": "VCID-t3ap-dzfp-1bd6" }, { "vulnerability": "VCID-t476-g5u5-1yeh" }, { "vulnerability": "VCID-trd4-8vc9-ufab" }, { "vulnerability": "VCID-u5wv-47m4-8yd6" }, { "vulnerability": "VCID-x9ns-34nt-gfer" }, { "vulnerability": "VCID-xh7u-8ze6-cqhk" }, { "vulnerability": "VCID-xunf-mqrn-97f5" }, { "vulnerability": "VCID-y7az-a4um-jqff" }, { "vulnerability": "VCID-ydhm-m8vh-mber" }, { "vulnerability": "VCID-z4w8-3mr1-63ed" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.10.1" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11798?format=api", "purl": "pkg:pypi/apache-airflow@1.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2fnz-jqpe-nuau" }, { "vulnerability": "VCID-2xr2-w3hk-auck" }, { "vulnerability": "VCID-2ysx-9hz5-fyfm" }, { "vulnerability": "VCID-3h3z-bfsc-jqax" }, { "vulnerability": "VCID-4dpy-dzpr-bbg7" }, { "vulnerability": "VCID-4ga6-4111-dyc9" }, { "vulnerability": "VCID-4xax-xw67-2qfv" }, { "vulnerability": "VCID-4xdb-1kww-sfdh" }, { "vulnerability": "VCID-56eq-awhd-d3fr" }, { "vulnerability": "VCID-5cpd-kjpb-ekhv" }, { "vulnerability": "VCID-5yxa-ubfq-fqdx" }, { "vulnerability": "VCID-5zmy-2ape-7qfa" }, { "vulnerability": "VCID-6c7g-ws6x-yygu" }, { "vulnerability": "VCID-6gjt-zsju-47a3" }, { "vulnerability": "VCID-6ksf-tekv-dud3" }, { "vulnerability": "VCID-6vg9-hu9u-q7c3" }, { "vulnerability": "VCID-71hr-1ews-9qa6" }, { "vulnerability": "VCID-7zef-tgy9-kkh6" }, { "vulnerability": "VCID-82kk-s7d6-f7he" }, { "vulnerability": "VCID-835a-arqz-g7h7" }, { "vulnerability": "VCID-8h35-s38x-buey" }, { "vulnerability": "VCID-91n6-evww-zybp" }, { "vulnerability": "VCID-98yf-mvnw-d3b4" }, { "vulnerability": "VCID-9jm4-t1je-vqhm" }, { "vulnerability": "VCID-9tq4-v733-hug3" }, { "vulnerability": "VCID-amac-hqnj-xfgz" }, { "vulnerability": "VCID-asrx-5a3k-r3gs" }, { "vulnerability": "VCID-b3w3-h9cm-ufgm" }, { "vulnerability": "VCID-bwd5-3jt5-pyb8" }, { "vulnerability": "VCID-cahz-4dy7-bbe9" }, { "vulnerability": "VCID-dh4r-77xc-cbas" }, { "vulnerability": "VCID-due7-n14c-akfx" }, { "vulnerability": "VCID-e737-kzbj-37gg" }, { "vulnerability": "VCID-ez45-qkb4-xkba" }, { "vulnerability": "VCID-fbjk-2uvy-mqfc" }, { "vulnerability": "VCID-frbp-mhhr-8bdt" }, { "vulnerability": "VCID-gz6e-b7dz-5qdf" }, { "vulnerability": "VCID-h6sp-398p-pbeg" }, { "vulnerability": "VCID-hah6-e5fc-juc5" }, { "vulnerability": "VCID-hy75-nfg7-zfae" }, { "vulnerability": "VCID-j86y-n37n-n7ft" }, { "vulnerability": "VCID-jq98-gxbc-pydt" }, { "vulnerability": "VCID-kh46-xrgm-9udx" }, { "vulnerability": "VCID-ks8d-9vr8-4feh" }, { "vulnerability": "VCID-mcbu-b45m-k3ck" }, { "vulnerability": "VCID-njyy-ywer-x7bf" }, { "vulnerability": "VCID-p9we-cpy2-17h4" }, { "vulnerability": "VCID-pe8h-9hgu-j3hx" }, { "vulnerability": "VCID-pybp-gfy8-2qcr" }, { "vulnerability": "VCID-pypb-cezm-rkb2" }, { "vulnerability": "VCID-q83y-d2x7-m7hv" }, { "vulnerability": "VCID-q84t-8dac-93dm" }, { "vulnerability": "VCID-qehu-58hj-67gn" }, { "vulnerability": "VCID-qmpd-946c-gqbc" }, { "vulnerability": "VCID-qr9h-6dg8-gkh3" }, { "vulnerability": "VCID-quaj-w9r3-qya8" }, { "vulnerability": "VCID-reu2-2xcq-fqa4" }, { "vulnerability": "VCID-ryct-uaw3-fyfc" }, { "vulnerability": "VCID-suwt-h1ze-mydu" }, { "vulnerability": "VCID-t3ap-dzfp-1bd6" }, { "vulnerability": "VCID-t476-g5u5-1yeh" }, { "vulnerability": "VCID-trd4-8vc9-ufab" }, { "vulnerability": "VCID-u5wv-47m4-8yd6" }, { "vulnerability": "VCID-x9ns-34nt-gfer" }, { "vulnerability": "VCID-xh7u-8ze6-cqhk" }, { "vulnerability": "VCID-xt2u-n7bw-nben" }, { "vulnerability": "VCID-xunf-mqrn-97f5" }, { "vulnerability": "VCID-y7az-a4um-jqff" }, { "vulnerability": "VCID-ydhm-m8vh-mber" }, { "vulnerability": "VCID-z4w8-3mr1-63ed" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/11799?format=api", "purl": "pkg:pypi/apache-airflow@1.8.2rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2fnz-jqpe-nuau" }, { "vulnerability": "VCID-2xr2-w3hk-auck" }, { "vulnerability": "VCID-2ysx-9hz5-fyfm" }, { "vulnerability": "VCID-3h3z-bfsc-jqax" }, { "vulnerability": "VCID-4dpy-dzpr-bbg7" }, { "vulnerability": "VCID-4ga6-4111-dyc9" }, { "vulnerability": "VCID-4xax-xw67-2qfv" }, { "vulnerability": "VCID-4xdb-1kww-sfdh" }, { "vulnerability": "VCID-56eq-awhd-d3fr" }, { "vulnerability": "VCID-5cpd-kjpb-ekhv" }, { "vulnerability": "VCID-5yxa-ubfq-fqdx" }, { "vulnerability": "VCID-5zmy-2ape-7qfa" }, { "vulnerability": "VCID-6c7g-ws6x-yygu" }, { "vulnerability": "VCID-6gjt-zsju-47a3" }, { "vulnerability": "VCID-6ksf-tekv-dud3" }, { "vulnerability": "VCID-6vg9-hu9u-q7c3" }, { "vulnerability": "VCID-71hr-1ews-9qa6" }, { "vulnerability": "VCID-7zef-tgy9-kkh6" }, { "vulnerability": "VCID-82kk-s7d6-f7he" }, { "vulnerability": "VCID-835a-arqz-g7h7" }, { "vulnerability": "VCID-8h35-s38x-buey" }, { "vulnerability": "VCID-91n6-evww-zybp" }, { "vulnerability": "VCID-98yf-mvnw-d3b4" }, { "vulnerability": "VCID-9jm4-t1je-vqhm" }, { "vulnerability": "VCID-9tq4-v733-hug3" }, { "vulnerability": "VCID-amac-hqnj-xfgz" }, { "vulnerability": "VCID-asrx-5a3k-r3gs" }, { "vulnerability": "VCID-b3w3-h9cm-ufgm" }, { "vulnerability": "VCID-bwd5-3jt5-pyb8" }, { "vulnerability": "VCID-cahz-4dy7-bbe9" }, { "vulnerability": "VCID-dh4r-77xc-cbas" }, { "vulnerability": "VCID-due7-n14c-akfx" }, { "vulnerability": "VCID-e737-kzbj-37gg" }, { "vulnerability": "VCID-ez45-qkb4-xkba" }, { "vulnerability": "VCID-fbjk-2uvy-mqfc" }, { "vulnerability": "VCID-frbp-mhhr-8bdt" }, { "vulnerability": "VCID-gz6e-b7dz-5qdf" }, { "vulnerability": "VCID-h6sp-398p-pbeg" }, { "vulnerability": "VCID-hah6-e5fc-juc5" }, { "vulnerability": "VCID-hy75-nfg7-zfae" }, { "vulnerability": "VCID-j86y-n37n-n7ft" }, { "vulnerability": "VCID-jq98-gxbc-pydt" }, { "vulnerability": "VCID-kh46-xrgm-9udx" }, { "vulnerability": "VCID-ks8d-9vr8-4feh" }, { "vulnerability": "VCID-mcbu-b45m-k3ck" }, { "vulnerability": "VCID-njyy-ywer-x7bf" }, { "vulnerability": "VCID-p9we-cpy2-17h4" }, { "vulnerability": "VCID-pe8h-9hgu-j3hx" }, { "vulnerability": "VCID-pybp-gfy8-2qcr" }, { "vulnerability": "VCID-pypb-cezm-rkb2" }, { "vulnerability": "VCID-q83y-d2x7-m7hv" }, { "vulnerability": "VCID-q84t-8dac-93dm" }, { "vulnerability": "VCID-qehu-58hj-67gn" }, { "vulnerability": "VCID-qmpd-946c-gqbc" }, { "vulnerability": "VCID-qr9h-6dg8-gkh3" }, { "vulnerability": "VCID-quaj-w9r3-qya8" }, { "vulnerability": "VCID-reu2-2xcq-fqa4" }, { "vulnerability": "VCID-ryct-uaw3-fyfc" }, { "vulnerability": "VCID-suwt-h1ze-mydu" }, { "vulnerability": "VCID-t3ap-dzfp-1bd6" }, { "vulnerability": "VCID-t476-g5u5-1yeh" }, { "vulnerability": "VCID-trd4-8vc9-ufab" }, { "vulnerability": "VCID-u5wv-47m4-8yd6" }, { "vulnerability": "VCID-x9ns-34nt-gfer" }, { "vulnerability": "VCID-xh7u-8ze6-cqhk" }, { "vulnerability": "VCID-xt2u-n7bw-nben" }, { "vulnerability": "VCID-xunf-mqrn-97f5" }, { "vulnerability": "VCID-y7az-a4um-jqff" }, { "vulnerability": "VCID-ydhm-m8vh-mber" }, { "vulnerability": "VCID-z4w8-3mr1-63ed" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.2rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/11800?format=api", "purl": "pkg:pypi/apache-airflow@1.8.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2fnz-jqpe-nuau" }, { "vulnerability": "VCID-2xr2-w3hk-auck" }, { "vulnerability": "VCID-2ysx-9hz5-fyfm" }, { "vulnerability": "VCID-3h3z-bfsc-jqax" }, { "vulnerability": "VCID-4dpy-dzpr-bbg7" }, { "vulnerability": "VCID-4ga6-4111-dyc9" }, { "vulnerability": "VCID-4xax-xw67-2qfv" }, { "vulnerability": "VCID-4xdb-1kww-sfdh" }, { "vulnerability": "VCID-56eq-awhd-d3fr" }, { "vulnerability": "VCID-5cpd-kjpb-ekhv" }, { "vulnerability": "VCID-5yxa-ubfq-fqdx" }, { "vulnerability": "VCID-5zmy-2ape-7qfa" }, { "vulnerability": "VCID-6c7g-ws6x-yygu" }, { "vulnerability": "VCID-6gjt-zsju-47a3" }, { "vulnerability": "VCID-6ksf-tekv-dud3" }, { "vulnerability": "VCID-6vg9-hu9u-q7c3" }, { "vulnerability": "VCID-71hr-1ews-9qa6" }, { "vulnerability": "VCID-7zef-tgy9-kkh6" }, { "vulnerability": "VCID-82kk-s7d6-f7he" }, { "vulnerability": "VCID-835a-arqz-g7h7" }, { "vulnerability": "VCID-8h35-s38x-buey" }, { "vulnerability": "VCID-91n6-evww-zybp" }, { "vulnerability": "VCID-98yf-mvnw-d3b4" }, { "vulnerability": "VCID-9jm4-t1je-vqhm" }, { "vulnerability": "VCID-9tq4-v733-hug3" }, { "vulnerability": "VCID-amac-hqnj-xfgz" }, { "vulnerability": "VCID-asrx-5a3k-r3gs" }, { "vulnerability": "VCID-b3w3-h9cm-ufgm" }, { "vulnerability": "VCID-bwd5-3jt5-pyb8" }, { "vulnerability": "VCID-cahz-4dy7-bbe9" }, { "vulnerability": "VCID-dh4r-77xc-cbas" }, { "vulnerability": "VCID-due7-n14c-akfx" }, { "vulnerability": "VCID-e737-kzbj-37gg" }, { "vulnerability": "VCID-ez45-qkb4-xkba" }, { "vulnerability": "VCID-fbjk-2uvy-mqfc" }, { "vulnerability": "VCID-frbp-mhhr-8bdt" }, { "vulnerability": "VCID-gz6e-b7dz-5qdf" }, { "vulnerability": "VCID-h6sp-398p-pbeg" }, { "vulnerability": "VCID-hah6-e5fc-juc5" }, { "vulnerability": "VCID-hy75-nfg7-zfae" }, { "vulnerability": "VCID-j86y-n37n-n7ft" }, { "vulnerability": "VCID-jq98-gxbc-pydt" }, { "vulnerability": "VCID-kh46-xrgm-9udx" }, { "vulnerability": "VCID-ks8d-9vr8-4feh" }, { "vulnerability": "VCID-mcbu-b45m-k3ck" }, { "vulnerability": "VCID-njyy-ywer-x7bf" }, { "vulnerability": "VCID-p9we-cpy2-17h4" }, { "vulnerability": "VCID-pe8h-9hgu-j3hx" }, { "vulnerability": "VCID-pybp-gfy8-2qcr" }, { "vulnerability": "VCID-pypb-cezm-rkb2" }, { "vulnerability": "VCID-q83y-d2x7-m7hv" }, { "vulnerability": "VCID-q84t-8dac-93dm" }, { "vulnerability": "VCID-qehu-58hj-67gn" }, { "vulnerability": "VCID-qmpd-946c-gqbc" }, { "vulnerability": "VCID-qr9h-6dg8-gkh3" }, { "vulnerability": "VCID-quaj-w9r3-qya8" }, { "vulnerability": "VCID-reu2-2xcq-fqa4" }, { "vulnerability": "VCID-ryct-uaw3-fyfc" }, { "vulnerability": "VCID-suwt-h1ze-mydu" }, { "vulnerability": "VCID-t3ap-dzfp-1bd6" }, { "vulnerability": "VCID-t476-g5u5-1yeh" }, { "vulnerability": "VCID-trd4-8vc9-ufab" }, { "vulnerability": "VCID-u5wv-47m4-8yd6" }, { "vulnerability": "VCID-x9ns-34nt-gfer" }, { "vulnerability": "VCID-xh7u-8ze6-cqhk" }, { "vulnerability": "VCID-xt2u-n7bw-nben" }, { "vulnerability": "VCID-xunf-mqrn-97f5" }, { "vulnerability": "VCID-y7az-a4um-jqff" }, { "vulnerability": "VCID-ydhm-m8vh-mber" }, { "vulnerability": "VCID-z4w8-3mr1-63ed" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/11801?format=api", "purl": "pkg:pypi/apache-airflow@1.9.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2fnz-jqpe-nuau" }, { "vulnerability": "VCID-2xr2-w3hk-auck" }, { "vulnerability": "VCID-2ysx-9hz5-fyfm" }, { "vulnerability": "VCID-3h3z-bfsc-jqax" }, { "vulnerability": "VCID-4dpy-dzpr-bbg7" }, { "vulnerability": "VCID-4ga6-4111-dyc9" }, { "vulnerability": "VCID-4xax-xw67-2qfv" }, { "vulnerability": "VCID-4xdb-1kww-sfdh" }, { "vulnerability": "VCID-56eq-awhd-d3fr" }, { "vulnerability": "VCID-5cpd-kjpb-ekhv" }, { "vulnerability": "VCID-5yxa-ubfq-fqdx" }, { "vulnerability": "VCID-5zmy-2ape-7qfa" }, { "vulnerability": "VCID-6c7g-ws6x-yygu" }, { "vulnerability": "VCID-6gjt-zsju-47a3" }, { "vulnerability": "VCID-6ksf-tekv-dud3" }, { "vulnerability": "VCID-6vg9-hu9u-q7c3" }, { "vulnerability": "VCID-71hr-1ews-9qa6" }, { "vulnerability": "VCID-7zef-tgy9-kkh6" }, { "vulnerability": "VCID-82kk-s7d6-f7he" }, { "vulnerability": "VCID-835a-arqz-g7h7" }, { "vulnerability": "VCID-91n6-evww-zybp" }, { "vulnerability": "VCID-98yf-mvnw-d3b4" }, { "vulnerability": "VCID-9jm4-t1je-vqhm" }, { "vulnerability": "VCID-9tq4-v733-hug3" }, { "vulnerability": "VCID-amac-hqnj-xfgz" }, { "vulnerability": "VCID-b3w3-h9cm-ufgm" }, { "vulnerability": "VCID-bwd5-3jt5-pyb8" }, { "vulnerability": "VCID-cahz-4dy7-bbe9" }, { "vulnerability": "VCID-dh4r-77xc-cbas" }, { "vulnerability": "VCID-due7-n14c-akfx" }, { "vulnerability": "VCID-ez45-qkb4-xkba" }, { "vulnerability": "VCID-fbjk-2uvy-mqfc" }, { "vulnerability": "VCID-frbp-mhhr-8bdt" }, { "vulnerability": "VCID-gz6e-b7dz-5qdf" }, { "vulnerability": "VCID-h6sp-398p-pbeg" }, { "vulnerability": "VCID-hah6-e5fc-juc5" }, { "vulnerability": "VCID-hy75-nfg7-zfae" }, { "vulnerability": "VCID-j86y-n37n-n7ft" }, { "vulnerability": "VCID-jq98-gxbc-pydt" }, { "vulnerability": "VCID-kh46-xrgm-9udx" }, { "vulnerability": "VCID-ks8d-9vr8-4feh" }, { "vulnerability": "VCID-mcbu-b45m-k3ck" }, { "vulnerability": "VCID-njyy-ywer-x7bf" }, { "vulnerability": "VCID-p9we-cpy2-17h4" }, { "vulnerability": "VCID-pe8h-9hgu-j3hx" }, { "vulnerability": "VCID-pybp-gfy8-2qcr" }, { "vulnerability": "VCID-pypb-cezm-rkb2" }, { "vulnerability": "VCID-q83y-d2x7-m7hv" }, { "vulnerability": "VCID-q84t-8dac-93dm" }, { "vulnerability": "VCID-qehu-58hj-67gn" }, { "vulnerability": "VCID-qmpd-946c-gqbc" }, { "vulnerability": "VCID-qr9h-6dg8-gkh3" }, { "vulnerability": "VCID-quaj-w9r3-qya8" }, { "vulnerability": "VCID-reu2-2xcq-fqa4" }, { "vulnerability": "VCID-ryct-uaw3-fyfc" }, { "vulnerability": "VCID-suwt-h1ze-mydu" }, { "vulnerability": "VCID-t3ap-dzfp-1bd6" }, { "vulnerability": "VCID-t476-g5u5-1yeh" }, { "vulnerability": "VCID-trd4-8vc9-ufab" }, { "vulnerability": "VCID-u5wv-47m4-8yd6" }, { "vulnerability": "VCID-x9ns-34nt-gfer" }, { "vulnerability": "VCID-xh7u-8ze6-cqhk" }, { "vulnerability": "VCID-xunf-mqrn-97f5" }, { "vulnerability": "VCID-y7az-a4um-jqff" }, { "vulnerability": "VCID-ydhm-m8vh-mber" }, { "vulnerability": "VCID-z4w8-3mr1-63ed" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.9.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/12744?format=api", "purl": "pkg:pypi/apache-airflow@1.10.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2fnz-jqpe-nuau" }, { "vulnerability": "VCID-2xr2-w3hk-auck" }, { "vulnerability": "VCID-2ysx-9hz5-fyfm" }, { "vulnerability": "VCID-3h3z-bfsc-jqax" }, { "vulnerability": "VCID-4dpy-dzpr-bbg7" }, { "vulnerability": "VCID-4ga6-4111-dyc9" }, { "vulnerability": "VCID-4xax-xw67-2qfv" }, { "vulnerability": "VCID-4xdb-1kww-sfdh" }, { "vulnerability": "VCID-56eq-awhd-d3fr" }, { "vulnerability": "VCID-5cpd-kjpb-ekhv" }, { "vulnerability": "VCID-5yxa-ubfq-fqdx" }, { "vulnerability": "VCID-5zmy-2ape-7qfa" }, { "vulnerability": "VCID-6c7g-ws6x-yygu" }, { "vulnerability": "VCID-6gjt-zsju-47a3" }, { "vulnerability": "VCID-6ksf-tekv-dud3" }, { "vulnerability": "VCID-6vg9-hu9u-q7c3" }, { "vulnerability": "VCID-71hr-1ews-9qa6" }, { "vulnerability": "VCID-7zef-tgy9-kkh6" }, { "vulnerability": "VCID-82kk-s7d6-f7he" }, { "vulnerability": "VCID-835a-arqz-g7h7" }, { "vulnerability": "VCID-91n6-evww-zybp" }, { "vulnerability": "VCID-98yf-mvnw-d3b4" }, { "vulnerability": "VCID-9jm4-t1je-vqhm" }, { "vulnerability": "VCID-9tq4-v733-hug3" }, { "vulnerability": "VCID-amac-hqnj-xfgz" }, { "vulnerability": "VCID-b3w3-h9cm-ufgm" }, { "vulnerability": "VCID-bwd5-3jt5-pyb8" }, { "vulnerability": "VCID-cahz-4dy7-bbe9" }, { "vulnerability": "VCID-dh4r-77xc-cbas" }, { "vulnerability": "VCID-due7-n14c-akfx" }, { "vulnerability": "VCID-ez45-qkb4-xkba" }, { "vulnerability": "VCID-fbjk-2uvy-mqfc" }, { "vulnerability": "VCID-frbp-mhhr-8bdt" }, { "vulnerability": "VCID-gn6e-a1yp-g7dw" }, { "vulnerability": "VCID-gz6e-b7dz-5qdf" }, { "vulnerability": "VCID-h6sp-398p-pbeg" }, { "vulnerability": "VCID-hah6-e5fc-juc5" }, { "vulnerability": "VCID-hy75-nfg7-zfae" }, { "vulnerability": "VCID-j86y-n37n-n7ft" }, { "vulnerability": "VCID-jq98-gxbc-pydt" }, { "vulnerability": "VCID-kh46-xrgm-9udx" }, { "vulnerability": "VCID-ks8d-9vr8-4feh" }, { "vulnerability": "VCID-mcbu-b45m-k3ck" }, { "vulnerability": "VCID-me8m-415b-g3fx" }, { "vulnerability": "VCID-njyy-ywer-x7bf" }, { "vulnerability": "VCID-p9we-cpy2-17h4" }, { "vulnerability": "VCID-pe8h-9hgu-j3hx" }, { "vulnerability": "VCID-pybp-gfy8-2qcr" }, { "vulnerability": "VCID-pypb-cezm-rkb2" }, { "vulnerability": "VCID-q83y-d2x7-m7hv" }, { "vulnerability": "VCID-q84t-8dac-93dm" }, { "vulnerability": "VCID-qehu-58hj-67gn" }, { "vulnerability": "VCID-qmpd-946c-gqbc" }, { "vulnerability": "VCID-qr9h-6dg8-gkh3" }, { "vulnerability": "VCID-quaj-w9r3-qya8" }, { "vulnerability": "VCID-reu2-2xcq-fqa4" }, { "vulnerability": "VCID-ryct-uaw3-fyfc" }, { "vulnerability": "VCID-suwt-h1ze-mydu" }, { "vulnerability": "VCID-t3ap-dzfp-1bd6" }, { "vulnerability": "VCID-t476-g5u5-1yeh" }, { "vulnerability": "VCID-trd4-8vc9-ufab" }, { "vulnerability": "VCID-u5wv-47m4-8yd6" }, { "vulnerability": "VCID-x9ns-34nt-gfer" }, { "vulnerability": "VCID-xh7u-8ze6-cqhk" }, { "vulnerability": "VCID-xunf-mqrn-97f5" }, { "vulnerability": "VCID-y7az-a4um-jqff" }, { "vulnerability": "VCID-ydhm-m8vh-mber" }, { "vulnerability": "VCID-z4w8-3mr1-63ed" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.10.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/12745?format=api", "purl": "pkg:pypi/apache-airflow@1.10.1b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2fnz-jqpe-nuau" }, { "vulnerability": "VCID-2xr2-w3hk-auck" }, { "vulnerability": "VCID-2ysx-9hz5-fyfm" }, { "vulnerability": "VCID-3h3z-bfsc-jqax" }, { "vulnerability": "VCID-4dpy-dzpr-bbg7" }, { "vulnerability": "VCID-4ga6-4111-dyc9" }, { "vulnerability": "VCID-4xax-xw67-2qfv" }, { "vulnerability": "VCID-4xdb-1kww-sfdh" }, { "vulnerability": "VCID-56eq-awhd-d3fr" }, { "vulnerability": "VCID-5cpd-kjpb-ekhv" }, { "vulnerability": "VCID-5yxa-ubfq-fqdx" }, { "vulnerability": "VCID-5zmy-2ape-7qfa" }, { "vulnerability": "VCID-6c7g-ws6x-yygu" }, { "vulnerability": "VCID-6gjt-zsju-47a3" }, { "vulnerability": "VCID-6ksf-tekv-dud3" }, { "vulnerability": "VCID-6vg9-hu9u-q7c3" }, { "vulnerability": "VCID-71hr-1ews-9qa6" }, { "vulnerability": "VCID-7zef-tgy9-kkh6" }, { "vulnerability": "VCID-82kk-s7d6-f7he" }, { "vulnerability": "VCID-835a-arqz-g7h7" }, { "vulnerability": "VCID-91n6-evww-zybp" }, { "vulnerability": "VCID-98yf-mvnw-d3b4" }, { "vulnerability": "VCID-9jm4-t1je-vqhm" }, { "vulnerability": "VCID-9tq4-v733-hug3" }, { "vulnerability": "VCID-amac-hqnj-xfgz" }, { "vulnerability": "VCID-b3w3-h9cm-ufgm" }, { "vulnerability": "VCID-bwd5-3jt5-pyb8" }, { "vulnerability": "VCID-cahz-4dy7-bbe9" }, { "vulnerability": "VCID-dh4r-77xc-cbas" }, { "vulnerability": "VCID-due7-n14c-akfx" }, { "vulnerability": "VCID-ez45-qkb4-xkba" }, { "vulnerability": "VCID-fbjk-2uvy-mqfc" }, { "vulnerability": "VCID-frbp-mhhr-8bdt" }, { "vulnerability": "VCID-gn6e-a1yp-g7dw" }, { "vulnerability": "VCID-gz6e-b7dz-5qdf" }, { "vulnerability": "VCID-h6sp-398p-pbeg" }, { "vulnerability": "VCID-hah6-e5fc-juc5" }, { "vulnerability": "VCID-hy75-nfg7-zfae" }, { "vulnerability": "VCID-j86y-n37n-n7ft" }, { "vulnerability": "VCID-jq98-gxbc-pydt" }, { "vulnerability": "VCID-kh46-xrgm-9udx" }, { "vulnerability": "VCID-ks8d-9vr8-4feh" }, { "vulnerability": "VCID-mcbu-b45m-k3ck" }, { "vulnerability": "VCID-njyy-ywer-x7bf" }, { "vulnerability": "VCID-p9we-cpy2-17h4" }, { "vulnerability": "VCID-pe8h-9hgu-j3hx" }, { "vulnerability": "VCID-pybp-gfy8-2qcr" }, { "vulnerability": "VCID-pypb-cezm-rkb2" }, { "vulnerability": "VCID-q83y-d2x7-m7hv" }, { "vulnerability": "VCID-q84t-8dac-93dm" }, { "vulnerability": "VCID-qehu-58hj-67gn" }, { "vulnerability": "VCID-qmpd-946c-gqbc" }, { "vulnerability": "VCID-qr9h-6dg8-gkh3" }, { "vulnerability": "VCID-quaj-w9r3-qya8" }, { "vulnerability": "VCID-reu2-2xcq-fqa4" }, { "vulnerability": "VCID-ryct-uaw3-fyfc" }, { "vulnerability": "VCID-suwt-h1ze-mydu" }, { "vulnerability": "VCID-t3ap-dzfp-1bd6" }, { "vulnerability": "VCID-t476-g5u5-1yeh" }, { "vulnerability": "VCID-trd4-8vc9-ufab" }, { "vulnerability": "VCID-u5wv-47m4-8yd6" }, { "vulnerability": "VCID-x9ns-34nt-gfer" }, { "vulnerability": "VCID-xh7u-8ze6-cqhk" }, { "vulnerability": "VCID-xunf-mqrn-97f5" }, { "vulnerability": "VCID-y7az-a4um-jqff" }, { "vulnerability": "VCID-ydhm-m8vh-mber" }, { "vulnerability": "VCID-z4w8-3mr1-63ed" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.10.1b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/12746?format=api", "purl": "pkg:pypi/apache-airflow@1.10.1rc2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2fnz-jqpe-nuau" }, { "vulnerability": "VCID-2xr2-w3hk-auck" }, { "vulnerability": "VCID-2ysx-9hz5-fyfm" }, { "vulnerability": "VCID-3h3z-bfsc-jqax" }, { "vulnerability": "VCID-4dpy-dzpr-bbg7" }, { "vulnerability": "VCID-4ga6-4111-dyc9" }, { "vulnerability": "VCID-4xax-xw67-2qfv" }, { "vulnerability": "VCID-4xdb-1kww-sfdh" }, { "vulnerability": "VCID-56eq-awhd-d3fr" }, { "vulnerability": "VCID-5cpd-kjpb-ekhv" }, { "vulnerability": "VCID-5yxa-ubfq-fqdx" }, { "vulnerability": "VCID-5zmy-2ape-7qfa" }, { "vulnerability": "VCID-6c7g-ws6x-yygu" }, { "vulnerability": "VCID-6gjt-zsju-47a3" }, { "vulnerability": "VCID-6ksf-tekv-dud3" }, { "vulnerability": "VCID-6vg9-hu9u-q7c3" }, { "vulnerability": "VCID-71hr-1ews-9qa6" }, { "vulnerability": "VCID-7zef-tgy9-kkh6" }, { "vulnerability": "VCID-82kk-s7d6-f7he" }, { "vulnerability": "VCID-835a-arqz-g7h7" }, { "vulnerability": "VCID-91n6-evww-zybp" }, { "vulnerability": "VCID-98yf-mvnw-d3b4" }, { "vulnerability": "VCID-9jm4-t1je-vqhm" }, { "vulnerability": "VCID-9tq4-v733-hug3" }, { "vulnerability": "VCID-amac-hqnj-xfgz" }, { "vulnerability": "VCID-b3w3-h9cm-ufgm" }, { "vulnerability": "VCID-bwd5-3jt5-pyb8" }, { "vulnerability": "VCID-cahz-4dy7-bbe9" }, { "vulnerability": "VCID-dh4r-77xc-cbas" }, { "vulnerability": "VCID-due7-n14c-akfx" }, { "vulnerability": "VCID-ez45-qkb4-xkba" }, { "vulnerability": "VCID-fbjk-2uvy-mqfc" }, { "vulnerability": "VCID-frbp-mhhr-8bdt" }, { "vulnerability": "VCID-gn6e-a1yp-g7dw" }, { "vulnerability": "VCID-gz6e-b7dz-5qdf" }, { "vulnerability": "VCID-h6sp-398p-pbeg" }, { "vulnerability": "VCID-hah6-e5fc-juc5" }, { "vulnerability": "VCID-hy75-nfg7-zfae" }, { "vulnerability": "VCID-j86y-n37n-n7ft" }, { "vulnerability": "VCID-jq98-gxbc-pydt" }, { "vulnerability": "VCID-kh46-xrgm-9udx" }, { "vulnerability": "VCID-ks8d-9vr8-4feh" }, { "vulnerability": "VCID-mcbu-b45m-k3ck" }, { "vulnerability": "VCID-njyy-ywer-x7bf" }, { "vulnerability": "VCID-p9we-cpy2-17h4" }, { "vulnerability": "VCID-pe8h-9hgu-j3hx" }, { "vulnerability": "VCID-pybp-gfy8-2qcr" }, { "vulnerability": "VCID-pypb-cezm-rkb2" }, { "vulnerability": "VCID-q83y-d2x7-m7hv" }, { "vulnerability": "VCID-q84t-8dac-93dm" }, { "vulnerability": "VCID-qehu-58hj-67gn" }, { "vulnerability": "VCID-qmpd-946c-gqbc" }, { "vulnerability": "VCID-qr9h-6dg8-gkh3" }, { "vulnerability": "VCID-quaj-w9r3-qya8" }, { "vulnerability": "VCID-reu2-2xcq-fqa4" }, { "vulnerability": "VCID-ryct-uaw3-fyfc" }, { "vulnerability": "VCID-suwt-h1ze-mydu" }, { "vulnerability": "VCID-t3ap-dzfp-1bd6" }, { "vulnerability": "VCID-t476-g5u5-1yeh" }, { "vulnerability": "VCID-trd4-8vc9-ufab" }, { "vulnerability": "VCID-u5wv-47m4-8yd6" }, { "vulnerability": "VCID-x9ns-34nt-gfer" }, { "vulnerability": "VCID-xh7u-8ze6-cqhk" }, { "vulnerability": "VCID-xunf-mqrn-97f5" }, { "vulnerability": "VCID-y7az-a4um-jqff" }, { "vulnerability": "VCID-ydhm-m8vh-mber" }, { "vulnerability": "VCID-z4w8-3mr1-63ed" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.10.1rc2" } ], "references": [ { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20245", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20245" }, { "reference_url": "https://cwe.mitre.org/data/definitions/295.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cwe.mitre.org/data/definitions/295.html" }, { "reference_url": "https://github.com/advisories/GHSA-77rc-x84q-pv4f", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-77rc-x84q-pv4f" }, { "reference_url": "https://lists.apache.org/thread.html/b549c7573b342a6e457e5a3225c33054244343927bbfb2a4cdc4cf73@%3Cdev.airflow.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/b549c7573b342a6e457e5a3225c33054244343927bbfb2a4cdc4cf73@%3Cdev.airflow.apache.org%3E" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 295, "name": "Improper Certificate Validation", "description": "The product does not validate, or incorrectly validates, a certificate." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": null, "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7zef-tgy9-kkh6" }