Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-u5h4-4p6j-wbay
SummaryPrivilege escalation via changing session state in an index function. This closes a corner case related to vulnerabilities CVE-2009-3230 and CVE-2007-6600 (below).more details
Aliases
0
alias CVE-2009-4136
Fixed_packages
0
url pkg:ebuild/dev-db/postgresql-base@8.3.18
purl pkg:ebuild/dev-db/postgresql-base@8.3.18
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/postgresql-base@8.3.18
1
url pkg:ebuild/dev-db/postgresql-base@8.4.11
purl pkg:ebuild/dev-db/postgresql-base@8.4.11
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/postgresql-base@8.4.11
2
url pkg:ebuild/dev-db/postgresql-base@9.0.5
purl pkg:ebuild/dev-db/postgresql-base@9.0.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/postgresql-base@9.0.5
3
url pkg:ebuild/dev-db/postgresql-server@8.3.18
purl pkg:ebuild/dev-db/postgresql-server@8.3.18
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/postgresql-server@8.3.18
4
url pkg:ebuild/dev-db/postgresql-server@8.4.11
purl pkg:ebuild/dev-db/postgresql-server@8.4.11
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/postgresql-server@8.4.11
5
url pkg:ebuild/dev-db/postgresql-server@9.0.5
purl pkg:ebuild/dev-db/postgresql-server@9.0.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/postgresql-server@9.0.5
6
url pkg:generic/postgresql@7.4.27
purl pkg:generic/postgresql@7.4.27
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@7.4.27
7
url pkg:generic/postgresql@8.0.23
purl pkg:generic/postgresql@8.0.23
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@8.0.23
8
url pkg:generic/postgresql@8.1.19
purl pkg:generic/postgresql@8.1.19
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@8.1.19
9
url pkg:generic/postgresql@8.2.15
purl pkg:generic/postgresql@8.2.15
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@8.2.15
10
url pkg:generic/postgresql@8.3.9
purl pkg:generic/postgresql@8.3.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@8.3.9
11
url pkg:generic/postgresql@8.4.2
purl pkg:generic/postgresql@8.4.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@8.4.2
Affected_packages
0
url pkg:ebuild/dev-db/postgresql@9
purl pkg:ebuild/dev-db/postgresql@9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qsp-wvwq-j3f5
1
vulnerability VCID-1uzm-h9m3-akge
2
vulnerability VCID-666x-ret3-xufr
3
vulnerability VCID-6dmy-t1qp-nuf3
4
vulnerability VCID-6vh2-2sja-xba9
5
vulnerability VCID-721k-9zdg-buhv
6
vulnerability VCID-7ev2-5qge-uubs
7
vulnerability VCID-7q99-jk4u-1fen
8
vulnerability VCID-c8ch-zd9x-kufn
9
vulnerability VCID-cffd-gdpc-uqeb
10
vulnerability VCID-s8a2-wbb4-dyda
11
vulnerability VCID-sxmd-5tzu-hkav
12
vulnerability VCID-u5h4-4p6j-wbay
13
vulnerability VCID-v69z-cmag-xfaf
14
vulnerability VCID-xzhq-u9n2-c3gn
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/postgresql@9
1
url pkg:ebuild/dev-db/postgresql-base@9
purl pkg:ebuild/dev-db/postgresql-base@9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qsp-wvwq-j3f5
1
vulnerability VCID-1uzm-h9m3-akge
2
vulnerability VCID-666x-ret3-xufr
3
vulnerability VCID-6dmy-t1qp-nuf3
4
vulnerability VCID-6vh2-2sja-xba9
5
vulnerability VCID-721k-9zdg-buhv
6
vulnerability VCID-7ev2-5qge-uubs
7
vulnerability VCID-7q99-jk4u-1fen
8
vulnerability VCID-c8ch-zd9x-kufn
9
vulnerability VCID-cffd-gdpc-uqeb
10
vulnerability VCID-s8a2-wbb4-dyda
11
vulnerability VCID-sxmd-5tzu-hkav
12
vulnerability VCID-u5h4-4p6j-wbay
13
vulnerability VCID-v69z-cmag-xfaf
14
vulnerability VCID-xzhq-u9n2-c3gn
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/postgresql-base@9
2
url pkg:ebuild/dev-db/postgresql-server@9
purl pkg:ebuild/dev-db/postgresql-server@9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qsp-wvwq-j3f5
1
vulnerability VCID-1uzm-h9m3-akge
2
vulnerability VCID-666x-ret3-xufr
3
vulnerability VCID-6dmy-t1qp-nuf3
4
vulnerability VCID-6vh2-2sja-xba9
5
vulnerability VCID-721k-9zdg-buhv
6
vulnerability VCID-7ev2-5qge-uubs
7
vulnerability VCID-7q99-jk4u-1fen
8
vulnerability VCID-c8ch-zd9x-kufn
9
vulnerability VCID-cffd-gdpc-uqeb
10
vulnerability VCID-s8a2-wbb4-dyda
11
vulnerability VCID-sxmd-5tzu-hkav
12
vulnerability VCID-u5h4-4p6j-wbay
13
vulnerability VCID-v69z-cmag-xfaf
14
vulnerability VCID-xzhq-u9n2-c3gn
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/postgresql-server@9
3
url pkg:generic/postgresql@7.4.0
purl pkg:generic/postgresql@7.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qsp-wvwq-j3f5
1
vulnerability VCID-1uzm-h9m3-akge
2
vulnerability VCID-4tyx-g9kz-y3fq
3
vulnerability VCID-5zj2-a3y7-zueh
4
vulnerability VCID-6ppw-nxh2-2bfs
5
vulnerability VCID-721k-9zdg-buhv
6
vulnerability VCID-7q99-jk4u-1fen
7
vulnerability VCID-8753-jd2h-8yhw
8
vulnerability VCID-8z74-udgw-kue3
9
vulnerability VCID-c8ch-zd9x-kufn
10
vulnerability VCID-cffd-gdpc-uqeb
11
vulnerability VCID-dema-khb4-d7c3
12
vulnerability VCID-dwxv-7v5k-pbgt
13
vulnerability VCID-f89t-37f7-hbau
14
vulnerability VCID-g5yd-z8gh-pbc4
15
vulnerability VCID-h86x-6j3b-eqfh
16
vulnerability VCID-hase-39jj-6khk
17
vulnerability VCID-jeef-j758-s3a4
18
vulnerability VCID-nj9p-fdc9-m7fu
19
vulnerability VCID-qw91-9hzj-2bbd
20
vulnerability VCID-s1hd-1asy-q3dd
21
vulnerability VCID-swbt-7zch-sbcp
22
vulnerability VCID-u5h4-4p6j-wbay
23
vulnerability VCID-v69z-cmag-xfaf
24
vulnerability VCID-wesb-d296-4ba8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@7.4.0
4
url pkg:generic/postgresql@8.0.0
purl pkg:generic/postgresql@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qsp-wvwq-j3f5
1
vulnerability VCID-1uzm-h9m3-akge
2
vulnerability VCID-4tyx-g9kz-y3fq
3
vulnerability VCID-5zj2-a3y7-zueh
4
vulnerability VCID-6ppw-nxh2-2bfs
5
vulnerability VCID-721k-9zdg-buhv
6
vulnerability VCID-7q99-jk4u-1fen
7
vulnerability VCID-8753-jd2h-8yhw
8
vulnerability VCID-8z74-udgw-kue3
9
vulnerability VCID-978k-4cn7-bfbz
10
vulnerability VCID-c8ch-zd9x-kufn
11
vulnerability VCID-cffd-gdpc-uqeb
12
vulnerability VCID-dema-khb4-d7c3
13
vulnerability VCID-f89t-37f7-hbau
14
vulnerability VCID-g5yd-z8gh-pbc4
15
vulnerability VCID-h86x-6j3b-eqfh
16
vulnerability VCID-hase-39jj-6khk
17
vulnerability VCID-jeef-j758-s3a4
18
vulnerability VCID-nj9p-fdc9-m7fu
19
vulnerability VCID-qw91-9hzj-2bbd
20
vulnerability VCID-s1hd-1asy-q3dd
21
vulnerability VCID-swbt-7zch-sbcp
22
vulnerability VCID-u5h4-4p6j-wbay
23
vulnerability VCID-v69z-cmag-xfaf
24
vulnerability VCID-wesb-d296-4ba8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@8.0.0
5
url pkg:generic/postgresql@8.1.0
purl pkg:generic/postgresql@8.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qsp-wvwq-j3f5
1
vulnerability VCID-1uzm-h9m3-akge
2
vulnerability VCID-4tyx-g9kz-y3fq
3
vulnerability VCID-5zj2-a3y7-zueh
4
vulnerability VCID-721k-9zdg-buhv
5
vulnerability VCID-7q99-jk4u-1fen
6
vulnerability VCID-8z74-udgw-kue3
7
vulnerability VCID-978k-4cn7-bfbz
8
vulnerability VCID-c8ch-zd9x-kufn
9
vulnerability VCID-cffd-gdpc-uqeb
10
vulnerability VCID-cnye-56z6-qqd6
11
vulnerability VCID-dema-khb4-d7c3
12
vulnerability VCID-f89t-37f7-hbau
13
vulnerability VCID-g5yd-z8gh-pbc4
14
vulnerability VCID-h86x-6j3b-eqfh
15
vulnerability VCID-mr2t-k7zs-7fad
16
vulnerability VCID-nj9p-fdc9-m7fu
17
vulnerability VCID-pqq7-pp4n-fqgp
18
vulnerability VCID-u5h4-4p6j-wbay
19
vulnerability VCID-v69z-cmag-xfaf
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@8.1.0
6
url pkg:generic/postgresql@8.2.0
purl pkg:generic/postgresql@8.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qsp-wvwq-j3f5
1
vulnerability VCID-1uzm-h9m3-akge
2
vulnerability VCID-5zj2-a3y7-zueh
3
vulnerability VCID-666x-ret3-xufr
4
vulnerability VCID-6dmy-t1qp-nuf3
5
vulnerability VCID-721k-9zdg-buhv
6
vulnerability VCID-7q99-jk4u-1fen
7
vulnerability VCID-978k-4cn7-bfbz
8
vulnerability VCID-c8ch-zd9x-kufn
9
vulnerability VCID-cffd-gdpc-uqeb
10
vulnerability VCID-f89t-37f7-hbau
11
vulnerability VCID-g5yd-z8gh-pbc4
12
vulnerability VCID-h86x-6j3b-eqfh
13
vulnerability VCID-nj9p-fdc9-m7fu
14
vulnerability VCID-s8a2-wbb4-dyda
15
vulnerability VCID-u5h4-4p6j-wbay
16
vulnerability VCID-v69z-cmag-xfaf
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@8.2.0
7
url pkg:generic/postgresql@8.3.0
purl pkg:generic/postgresql@8.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qsp-wvwq-j3f5
1
vulnerability VCID-1uzm-h9m3-akge
2
vulnerability VCID-2nve-471m-17h6
3
vulnerability VCID-35a3-5eq3-8bep
4
vulnerability VCID-666x-ret3-xufr
5
vulnerability VCID-6dmy-t1qp-nuf3
6
vulnerability VCID-6mck-xykx-yuba
7
vulnerability VCID-721k-9zdg-buhv
8
vulnerability VCID-7jb6-q4x1-cfbw
9
vulnerability VCID-7q99-jk4u-1fen
10
vulnerability VCID-811b-x31n-tfch
11
vulnerability VCID-bdq4-br3j-7kb8
12
vulnerability VCID-c8ch-zd9x-kufn
13
vulnerability VCID-cffd-gdpc-uqeb
14
vulnerability VCID-quqr-bg9k-7yb5
15
vulnerability VCID-s8a2-wbb4-dyda
16
vulnerability VCID-u5h4-4p6j-wbay
17
vulnerability VCID-v69z-cmag-xfaf
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@8.3.0
8
url pkg:generic/postgresql@8.4.0
purl pkg:generic/postgresql@8.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1uzm-h9m3-akge
1
vulnerability VCID-2nve-471m-17h6
2
vulnerability VCID-35a3-5eq3-8bep
3
vulnerability VCID-666x-ret3-xufr
4
vulnerability VCID-6mck-xykx-yuba
5
vulnerability VCID-721k-9zdg-buhv
6
vulnerability VCID-7jb6-q4x1-cfbw
7
vulnerability VCID-7q99-jk4u-1fen
8
vulnerability VCID-811b-x31n-tfch
9
vulnerability VCID-8cbh-gwwy-n3eq
10
vulnerability VCID-8j4f-u2tq-1qev
11
vulnerability VCID-bdq4-br3j-7kb8
12
vulnerability VCID-c8ch-zd9x-kufn
13
vulnerability VCID-cffd-gdpc-uqeb
14
vulnerability VCID-g4tm-8zhw-a7hn
15
vulnerability VCID-kbgc-w2jw-auh8
16
vulnerability VCID-nz16-gzhk-h3c1
17
vulnerability VCID-pvxg-byvu-pbec
18
vulnerability VCID-quqr-bg9k-7yb5
19
vulnerability VCID-reab-s9cu-yudn
20
vulnerability VCID-s8a2-wbb4-dyda
21
vulnerability VCID-u5h4-4p6j-wbay
22
vulnerability VCID-ux6m-dn6j-37dc
23
vulnerability VCID-v69z-cmag-xfaf
24
vulnerability VCID-w518-wkek-97ag
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@8.4.0
9
url pkg:rpm/redhat/postgresql@7.4.29-1.el4_8?arch=1
purl pkg:rpm/redhat/postgresql@7.4.29-1.el4_8?arch=1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1uzm-h9m3-akge
1
vulnerability VCID-6vh2-2sja-xba9
2
vulnerability VCID-7ev2-5qge-uubs
3
vulnerability VCID-cffd-gdpc-uqeb
4
vulnerability VCID-u5h4-4p6j-wbay
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/postgresql@7.4.29-1.el4_8%3Farch=1
10
url pkg:rpm/redhat/postgresql@8.1.21-1.el5_5?arch=1
purl pkg:rpm/redhat/postgresql@8.1.21-1.el5_5?arch=1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1uzm-h9m3-akge
1
vulnerability VCID-6vh2-2sja-xba9
2
vulnerability VCID-7ev2-5qge-uubs
3
vulnerability VCID-cffd-gdpc-uqeb
4
vulnerability VCID-u5h4-4p6j-wbay
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/postgresql@8.1.21-1.el5_5%3Farch=1
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4136.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4136.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-4136
reference_id
reference_type
scores
0
value 0.01557
scoring_system epss
scoring_elements 0.81393
published_at 2026-04-01T12:55:00Z
1
value 0.01557
scoring_system epss
scoring_elements 0.81402
published_at 2026-04-02T12:55:00Z
2
value 0.01557
scoring_system epss
scoring_elements 0.81425
published_at 2026-04-04T12:55:00Z
3
value 0.01579
scoring_system epss
scoring_elements 0.8153
published_at 2026-04-07T12:55:00Z
4
value 0.01579
scoring_system epss
scoring_elements 0.81558
published_at 2026-04-08T12:55:00Z
5
value 0.01579
scoring_system epss
scoring_elements 0.81564
published_at 2026-04-13T12:55:00Z
6
value 0.01579
scoring_system epss
scoring_elements 0.81583
published_at 2026-04-11T12:55:00Z
7
value 0.01579
scoring_system epss
scoring_elements 0.81571
published_at 2026-04-12T12:55:00Z
8
value 0.01579
scoring_system epss
scoring_elements 0.81601
published_at 2026-04-16T12:55:00Z
9
value 0.01579
scoring_system epss
scoring_elements 0.81603
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-4136
2
reference_url https://www.postgresql.org/support/security/CVE-2009-4136/
reference_id
reference_type
scores
url https://www.postgresql.org/support/security/CVE-2009-4136/
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=546321
reference_id 546321
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=546321
4
reference_url https://security.gentoo.org/glsa/201110-22
reference_id GLSA-201110-22
reference_type
scores
url https://security.gentoo.org/glsa/201110-22
5
reference_url https://access.redhat.com/errata/RHSA-2010:0427
reference_id RHSA-2010:0427
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0427
6
reference_url https://access.redhat.com/errata/RHSA-2010:0428
reference_id RHSA-2010:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0428
7
reference_url https://access.redhat.com/errata/RHSA-2010:0429
reference_id RHSA-2010:0429
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0429
8
reference_url https://usn.ubuntu.com/876-1/
reference_id USN-876-1
reference_type
scores
url https://usn.ubuntu.com/876-1/
Weaknesses
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-u5h4-4p6j-wbay