Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-6r1k-8y1c-q7fm

Summary Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and 21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Aliases

alias	CVE-2026-22007

Fixed_packages

url	pkg:deb/debian/openjdk-11@11.0.31%2B11-1?distro=sid
purl	pkg:deb/debian/openjdk-11@11.0.31%2B11-1?distro=sid
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-11@11.0.31%252B11-1%3Fdistro=sid

url	pkg:deb/debian/openjdk-17@17.0.18%2B8-1~deb12u1
purl	pkg:deb/debian/openjdk-17@17.0.18%2B8-1~deb12u1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-17@17.0.18%252B8-1~deb12u1

url	pkg:deb/debian/openjdk-17@17.0.19%2B10-1?distro=sid
purl	pkg:deb/debian/openjdk-17@17.0.19%2B10-1?distro=sid
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-17@17.0.19%252B10-1%3Fdistro=sid

url	pkg:deb/debian/openjdk-21@21.0.11%2B10-1?distro=trixie
purl	pkg:deb/debian/openjdk-21@21.0.11%2B10-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-21@21.0.11%252B10-1%3Fdistro=trixie

url	pkg:deb/debian/openjdk-25@25.0.3%2B9-1?distro=trixie
purl	pkg:deb/debian/openjdk-25@25.0.3%2B9-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-25@25.0.3%252B9-1%3Fdistro=trixie

url	pkg:deb/debian/openjdk-25@25.0.3%2B9-2?distro=trixie
purl	pkg:deb/debian/openjdk-25@25.0.3%2B9-2?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-25@25.0.3%252B9-2%3Fdistro=trixie

Affected_packages

url pkg:deb/debian/openjdk-11@11.0.24%2B8-2~deb11u1?distro=sid

purl pkg:deb/debian/openjdk-11@11.0.24%2B8-2~deb11u1?distro=sid

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-57sd-8y93-qqhu

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-jxgd-j4wr-tyb7

vulnerability	VCID-sz6r-65q1-q3bh

vulnerability	VCID-xte1-h9nn-4bbk

vulnerability	VCID-zsun-4q6p-8fek

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-11@11.0.24%252B8-2~deb11u1%3Fdistro=sid

url pkg:deb/debian/openjdk-17@17.0.12%2B7-2~deb11u1?distro=sid

purl pkg:deb/debian/openjdk-17@17.0.12%2B7-2~deb11u1?distro=sid

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-57sd-8y93-qqhu

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-jxgd-j4wr-tyb7

vulnerability	VCID-sz6r-65q1-q3bh

vulnerability	VCID-xte1-h9nn-4bbk

vulnerability	VCID-zsun-4q6p-8fek

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-17@17.0.12%252B7-2~deb11u1%3Fdistro=sid

url pkg:deb/debian/openjdk-17@17.0.12%2B7-2~deb11u1

purl pkg:deb/debian/openjdk-17@17.0.12%2B7-2~deb11u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-11vj-5zz4-6fe7

vulnerability	VCID-13t7-vubq-8kae

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-4snj-etwf-eqe8

vulnerability	VCID-57sd-8y93-qqhu

vulnerability	VCID-6196-gvhx-ruh8

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-9n5v-4daz-eyc2

vulnerability	VCID-apsn-z1br-3bdy

vulnerability	VCID-b32x-4pu4-jkh4

vulnerability	VCID-duy9-6f1p-vqah

vulnerability	VCID-e6dm-6767-9kdk

vulnerability	VCID-mt9c-tby1-wqe9

vulnerability	VCID-ntga-y6cv-a3df

vulnerability	VCID-nxx8-nehy-qyhg

vulnerability	VCID-p9na-7jta-9yg4

vulnerability	VCID-u81s-cs95-4yhx

vulnerability	VCID-vbw8-4j9f-eya5

vulnerability	VCID-vpnc-yu7r-bqb6

vulnerability	VCID-xte1-h9nn-4bbk

vulnerability	VCID-y8bc-k5qu-c7f5

vulnerability	VCID-z356-tw9t-q7bp

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-17@17.0.12%252B7-2~deb11u1

url pkg:deb/debian/openjdk-17@17.0.17%2B10-1~deb12u1?distro=sid

purl pkg:deb/debian/openjdk-17@17.0.17%2B10-1~deb12u1?distro=sid

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-57sd-8y93-qqhu

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-jxgd-j4wr-tyb7

vulnerability	VCID-sz6r-65q1-q3bh

vulnerability	VCID-xte1-h9nn-4bbk

vulnerability	VCID-zsun-4q6p-8fek

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-17@17.0.17%252B10-1~deb12u1%3Fdistro=sid

url pkg:deb/debian/openjdk-17@17.0.17%2B10-1~deb12u1

purl pkg:deb/debian/openjdk-17@17.0.17%2B10-1~deb12u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-4snj-etwf-eqe8

vulnerability	VCID-57sd-8y93-qqhu

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-apsn-z1br-3bdy

vulnerability	VCID-duy9-6f1p-vqah

vulnerability	VCID-mt9c-tby1-wqe9

vulnerability	VCID-xte1-h9nn-4bbk

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-17@17.0.17%252B10-1~deb12u1

url pkg:deb/debian/openjdk-21@21.0.10%2B7-1~deb13u1?distro=trixie

purl pkg:deb/debian/openjdk-21@21.0.10%2B7-1~deb13u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-57sd-8y93-qqhu

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-jxgd-j4wr-tyb7

vulnerability	VCID-sz6r-65q1-q3bh

vulnerability	VCID-xte1-h9nn-4bbk

vulnerability	VCID-zsun-4q6p-8fek

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-21@21.0.10%252B7-1~deb13u1%3Fdistro=trixie

url pkg:deb/debian/openjdk-21@21.0.11~9ea-1?distro=trixie

purl pkg:deb/debian/openjdk-21@21.0.11~9ea-1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-57sd-8y93-qqhu

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-jxgd-j4wr-tyb7

vulnerability	VCID-sz6r-65q1-q3bh

vulnerability	VCID-xte1-h9nn-4bbk

vulnerability	VCID-zsun-4q6p-8fek

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-21@21.0.11~9ea-1%3Fdistro=trixie

url pkg:deb/debian/openjdk-25@25.0.2%2B10-1~deb13u2?distro=trixie

purl pkg:deb/debian/openjdk-25@25.0.2%2B10-1~deb13u2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-57sd-8y93-qqhu

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-jxgd-j4wr-tyb7

vulnerability	VCID-m54j-wfuk-yua7

vulnerability	VCID-sz6r-65q1-q3bh

vulnerability	VCID-xte1-h9nn-4bbk

vulnerability	VCID-zsun-4q6p-8fek

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-25@25.0.2%252B10-1~deb13u2%3Fdistro=trixie

url pkg:deb/debian/openjdk-25@25.0.3~8ea-1?distro=trixie

purl pkg:deb/debian/openjdk-25@25.0.3~8ea-1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-57sd-8y93-qqhu

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-jxgd-j4wr-tyb7

vulnerability	VCID-m54j-wfuk-yua7

vulnerability	VCID-sz6r-65q1-q3bh

vulnerability	VCID-xte1-h9nn-4bbk

vulnerability	VCID-zsun-4q6p-8fek

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openjdk-25@25.0.3~8ea-1%3Fdistro=trixie

url pkg:rpm/redhat/java-11-openjdk@1:11.0.31.0.11-1?arch=el8

purl pkg:rpm/redhat/java-11-openjdk@1:11.0.31.0.11-1?arch=el8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-41qj-62x6-tqe5

vulnerability	VCID-57sd-8y93-qqhu

vulnerability	VCID-6fzj-746j-bkbc

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-7qam-er5a-gbas

vulnerability	VCID-dm7h-c7wt-1kbs

vulnerability	VCID-j7dk-wzkm-tfcr

vulnerability	VCID-jxgd-j4wr-tyb7

vulnerability	VCID-ptgq-884e-mkft

vulnerability	VCID-rm7f-ybuf-dyfq

vulnerability	VCID-sz6r-65q1-q3bh

vulnerability	VCID-xte1-h9nn-4bbk

vulnerability	VCID-xyhj-84d1-dqh3

vulnerability	VCID-zsun-4q6p-8fek

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-11-openjdk@1:11.0.31.0.11-1%3Farch=el8

url pkg:rpm/redhat/java-11-openjdk@1:11.0.31.0.11-1?arch=el7_9

purl pkg:rpm/redhat/java-11-openjdk@1:11.0.31.0.11-1?arch=el7_9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-41qj-62x6-tqe5

vulnerability	VCID-57sd-8y93-qqhu

vulnerability	VCID-6fzj-746j-bkbc

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-7qam-er5a-gbas

vulnerability	VCID-dm7h-c7wt-1kbs

vulnerability	VCID-j7dk-wzkm-tfcr

vulnerability	VCID-jxgd-j4wr-tyb7

vulnerability	VCID-ptgq-884e-mkft

vulnerability	VCID-rm7f-ybuf-dyfq

vulnerability	VCID-sz6r-65q1-q3bh

vulnerability	VCID-xte1-h9nn-4bbk

vulnerability	VCID-xyhj-84d1-dqh3

vulnerability	VCID-zsun-4q6p-8fek

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-11-openjdk@1:11.0.31.0.11-1%3Farch=el7_9

url pkg:rpm/redhat/java-11-openjdk@1:11.0.31.0.11-1?arch=el9

purl pkg:rpm/redhat/java-11-openjdk@1:11.0.31.0.11-1?arch=el9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-41qj-62x6-tqe5

vulnerability	VCID-57sd-8y93-qqhu

vulnerability	VCID-6fzj-746j-bkbc

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-7qam-er5a-gbas

vulnerability	VCID-dm7h-c7wt-1kbs

vulnerability	VCID-j7dk-wzkm-tfcr

vulnerability	VCID-jxgd-j4wr-tyb7

vulnerability	VCID-ptgq-884e-mkft

vulnerability	VCID-rm7f-ybuf-dyfq

vulnerability	VCID-sz6r-65q1-q3bh

vulnerability	VCID-xte1-h9nn-4bbk

vulnerability	VCID-xyhj-84d1-dqh3

vulnerability	VCID-zsun-4q6p-8fek

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-11-openjdk@1:11.0.31.0.11-1%3Farch=el9

url pkg:rpm/redhat/java-1.8.0-openjdk@1:1.8.0.492.b09-1?arch=el7_9

purl pkg:rpm/redhat/java-1.8.0-openjdk@1:1.8.0.492.b09-1?arch=el7_9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-6fzj-746j-bkbc

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-jxgd-j4wr-tyb7

vulnerability	VCID-sz6r-65q1-q3bh

vulnerability	VCID-xte1-h9nn-4bbk

vulnerability	VCID-zsun-4q6p-8fek

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.8.0-openjdk@1:1.8.0.492.b09-1%3Farch=el7_9

url pkg:rpm/redhat/java-25-openjdk@1:25.0.3.0.9-1?arch=el10_2

purl pkg:rpm/redhat/java-25-openjdk@1:25.0.3.0.9-1?arch=el10_2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-41qj-62x6-tqe5

vulnerability	VCID-57sd-8y93-qqhu

vulnerability	VCID-6fzj-746j-bkbc

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-dm7h-c7wt-1kbs

vulnerability	VCID-jxgd-j4wr-tyb7

vulnerability	VCID-m54j-wfuk-yua7

vulnerability	VCID-ptgq-884e-mkft

vulnerability	VCID-sz6r-65q1-q3bh

vulnerability	VCID-xte1-h9nn-4bbk

vulnerability	VCID-zsun-4q6p-8fek

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-25-openjdk@1:25.0.3.0.9-1%3Farch=el10_2

url pkg:rpm/redhat/java-25-openjdk@1:25.0.3.0.9-1?arch=el9

purl pkg:rpm/redhat/java-25-openjdk@1:25.0.3.0.9-1?arch=el9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1gha-995s-7qdg

vulnerability	VCID-41qj-62x6-tqe5

vulnerability	VCID-57sd-8y93-qqhu

vulnerability	VCID-6fzj-746j-bkbc

vulnerability	VCID-6r1k-8y1c-q7fm

vulnerability	VCID-dm7h-c7wt-1kbs

vulnerability	VCID-jxgd-j4wr-tyb7

vulnerability	VCID-m54j-wfuk-yua7

vulnerability	VCID-ptgq-884e-mkft

vulnerability	VCID-sz6r-65q1-q3bh

vulnerability	VCID-xte1-h9nn-4bbk

vulnerability	VCID-zsun-4q6p-8fek

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-25-openjdk@1:25.0.3.0.9-1%3Farch=el9

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-22007.json

reference_id

reference_type

scores

value	2.9
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-22007.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2026-22007

reference_id

reference_type

scores

value	0.00012
scoring_system	epss
scoring_elements	0.01704
published_at	2026-04-24T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2026-22007

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22007
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22007

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	2.9
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134894
reference_id	1134894
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134894

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=2460038
reference_id	2460038
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=2460038

reference_url

https://www.oracle.com/security-alerts/cpuapr2026.html

reference_id

cpuapr2026.html

reference_type

scores

value	2.9
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-22T14:05:16Z/

url

https://www.oracle.com/security-alerts/cpuapr2026.html

reference_url	https://access.redhat.com/errata/RHSA-2026:9254
reference_id	RHSA-2026:9254
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:9254

reference_url	https://access.redhat.com/errata/RHSA-2026:9255
reference_id	RHSA-2026:9255
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:9255

reference_url	https://access.redhat.com/errata/RHSA-2026:9256
reference_id	RHSA-2026:9256
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:9256

reference_url	https://access.redhat.com/errata/RHSA-2026:9682
reference_id	RHSA-2026:9682
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:9682

reference_url	https://access.redhat.com/errata/RHSA-2026:9684
reference_id	RHSA-2026:9684
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:9684

reference_url	https://access.redhat.com/errata/RHSA-2026:9685
reference_id	RHSA-2026:9685
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:9685

reference_url	https://access.redhat.com/errata/RHSA-2026:9687
reference_id	RHSA-2026:9687
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:9687

reference_url	https://access.redhat.com/errata/RHSA-2026:9688
reference_id	RHSA-2026:9688
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:9688

reference_url	https://access.redhat.com/errata/RHSA-2026:9690
reference_id	RHSA-2026:9690
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:9690

reference_url	https://access.redhat.com/errata/RHSA-2026:9691
reference_id	RHSA-2026:9691
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:9691

reference_url	https://access.redhat.com/errata/RHSA-2026:9693
reference_id	RHSA-2026:9693
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:9693

reference_url	https://access.redhat.com/errata/RHSA-2026:9694
reference_id	RHSA-2026:9694
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:9694

Weaknesses

cwe_id	327
name	Use of a Broken or Risky Cryptographic Algorithm
description	The product uses a broken or risky cryptographic algorithm or protocol.

Exploits

Severity_range_score 2.9 - 2.9

Exploitability 0.5

Weighted_severity 2.6

Risk_score 1.3

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6r1k-8y1c-q7fm

Vulnerability Instance