Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-6tgx-mpvy-63ab

Summary TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption.

Aliases

alias	CVE-2020-6173

alias	GHSA-2828-9vh6-9m6j

alias	PYSEC-2020-146

Fixed_packages

url pkg:pypi/tuf@0.12.2

purl pkg:pypi/tuf@0.12.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-px54-yh8d-5bbc

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.12.2

Affected_packages

url pkg:pypi/tuf@0.7.5

purl pkg:pypi/tuf@0.7.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.7.5

url pkg:pypi/tuf@0.9.8

purl pkg:pypi/tuf@0.9.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.9.8

url pkg:pypi/tuf@0.9.9

purl pkg:pypi/tuf@0.9.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.9.9

url pkg:pypi/tuf@0.10.0

purl pkg:pypi/tuf@0.10.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.10.0

url pkg:pypi/tuf@0.10.1

purl pkg:pypi/tuf@0.10.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.10.1

url pkg:pypi/tuf@0.10.2

purl pkg:pypi/tuf@0.10.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.10.2

url pkg:pypi/tuf@0.11.dev0

purl pkg:pypi/tuf@0.11.dev0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.11.dev0

url pkg:pypi/tuf@0.11.0

purl pkg:pypi/tuf@0.11.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.11.0

url pkg:pypi/tuf@0.11.1

purl pkg:pypi/tuf@0.11.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.11.1

url pkg:pypi/tuf@0.11.2.dev1

purl pkg:pypi/tuf@0.11.2.dev1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.11.2.dev1

url pkg:pypi/tuf@0.11.2.dev2

purl pkg:pypi/tuf@0.11.2.dev2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.11.2.dev2

url pkg:pypi/tuf@0.11.2.dev3

purl pkg:pypi/tuf@0.11.2.dev3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.11.2.dev3

url pkg:pypi/tuf@0.12.dev0

purl pkg:pypi/tuf@0.12.dev0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.12.dev0

url pkg:pypi/tuf@0.12.dev1

purl pkg:pypi/tuf@0.12.dev1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.12.dev1

url pkg:pypi/tuf@0.12.dev2

purl pkg:pypi/tuf@0.12.dev2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-m2sw-ms1a-zkb5

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.12.dev2

url pkg:pypi/tuf@0.12.0

purl pkg:pypi/tuf@0.12.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.12.0

url pkg:pypi/tuf@0.12.1

purl pkg:pypi/tuf@0.12.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6tgx-mpvy-63ab

vulnerability	VCID-px54-yh8d-5bbc

vulnerability	VCID-q9jt-smnw-s3h9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tuf@0.12.1

References

reference_url	https://github.com/advisories/GHSA-2828-9vh6-9m6j
reference_id
reference_type
scores
url	https://github.com/advisories/GHSA-2828-9vh6-9m6j

reference_url	https://github.com/theupdateframework/tuf/commits/develop
reference_id
reference_type
scores
url	https://github.com/theupdateframework/tuf/commits/develop

reference_url	https://github.com/theupdateframework/tuf/issues/973
reference_id
reference_type
scores
url	https://github.com/theupdateframework/tuf/issues/973

Weaknesses

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6tgx-mpvy-63ab

Vulnerability Instance