Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-63vz-b8s1-6fdb

Summary This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Command metadata is processed. When an arbitrary OS command is executed, the command output would be included in the HTML output.

Aliases

alias	CVE-2021-23422

alias	GHSA-87cj-px37-rc3x

alias	PYSEC-2021-116

alias	SNYK-PYTHON-BIKESHED-1537646

Fixed_packages

url	pkg:pypi/bikeshed@3.0.0
purl	pkg:pypi/bikeshed@3.0.0
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@3.0.0

Affected_packages

url pkg:pypi/bikeshed@1.0.0

purl pkg:pypi/bikeshed@1.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.0.0

url pkg:pypi/bikeshed@1.0.1

purl pkg:pypi/bikeshed@1.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.0.1

url pkg:pypi/bikeshed@1.0.2

purl pkg:pypi/bikeshed@1.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.0.2

url pkg:pypi/bikeshed@1.0.3

purl pkg:pypi/bikeshed@1.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.0.3

url pkg:pypi/bikeshed@1.0.4

purl pkg:pypi/bikeshed@1.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.0.4

url pkg:pypi/bikeshed@1.0.5

purl pkg:pypi/bikeshed@1.0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.0.5

url pkg:pypi/bikeshed@1.0.6

purl pkg:pypi/bikeshed@1.0.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.0.6

url pkg:pypi/bikeshed@1.0.7

purl pkg:pypi/bikeshed@1.0.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.0.7

url pkg:pypi/bikeshed@1.0.8

purl pkg:pypi/bikeshed@1.0.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.0.8

url pkg:pypi/bikeshed@1.0.9

purl pkg:pypi/bikeshed@1.0.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.0.9

url pkg:pypi/bikeshed@1.0.10

purl pkg:pypi/bikeshed@1.0.10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.0.10

url pkg:pypi/bikeshed@1.1.0

purl pkg:pypi/bikeshed@1.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.1.0

url pkg:pypi/bikeshed@1.2.0

purl pkg:pypi/bikeshed@1.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.2.0

url pkg:pypi/bikeshed@1.2.1

purl pkg:pypi/bikeshed@1.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.2.1

url pkg:pypi/bikeshed@1.2.2

purl pkg:pypi/bikeshed@1.2.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.2.2

url pkg:pypi/bikeshed@1.3.0

purl pkg:pypi/bikeshed@1.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.3.0

url pkg:pypi/bikeshed@1.4.0

purl pkg:pypi/bikeshed@1.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.4.0

url pkg:pypi/bikeshed@1.4.1

purl pkg:pypi/bikeshed@1.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.4.1

url pkg:pypi/bikeshed@1.4.2

purl pkg:pypi/bikeshed@1.4.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.4.2

url pkg:pypi/bikeshed@1.4.3

purl pkg:pypi/bikeshed@1.4.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.4.3

url pkg:pypi/bikeshed@1.4.4

purl pkg:pypi/bikeshed@1.4.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.4.4

url pkg:pypi/bikeshed@1.5.0

purl pkg:pypi/bikeshed@1.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.5.0

url pkg:pypi/bikeshed@1.5.1

purl pkg:pypi/bikeshed@1.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.5.1

url pkg:pypi/bikeshed@1.5.2

purl pkg:pypi/bikeshed@1.5.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.5.2

url pkg:pypi/bikeshed@1.5.3

purl pkg:pypi/bikeshed@1.5.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.5.3

url pkg:pypi/bikeshed@1.6.0

purl pkg:pypi/bikeshed@1.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.6.0

url pkg:pypi/bikeshed@1.6.1

purl pkg:pypi/bikeshed@1.6.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.6.1

url pkg:pypi/bikeshed@1.6.2

purl pkg:pypi/bikeshed@1.6.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.6.2

url pkg:pypi/bikeshed@1.6.3

purl pkg:pypi/bikeshed@1.6.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.6.3

url pkg:pypi/bikeshed@1.7.0

purl pkg:pypi/bikeshed@1.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@1.7.0

url pkg:pypi/bikeshed@2.0.0

purl pkg:pypi/bikeshed@2.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.0.0

url pkg:pypi/bikeshed@2.1.0

purl pkg:pypi/bikeshed@2.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.1.0

url pkg:pypi/bikeshed@2.2.0

purl pkg:pypi/bikeshed@2.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.2.0

url pkg:pypi/bikeshed@2.2.1

purl pkg:pypi/bikeshed@2.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.2.1

url pkg:pypi/bikeshed@2.2.2

purl pkg:pypi/bikeshed@2.2.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.2.2

url pkg:pypi/bikeshed@2.2.3

purl pkg:pypi/bikeshed@2.2.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.2.3

url pkg:pypi/bikeshed@2.3.0

purl pkg:pypi/bikeshed@2.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.3.0

url pkg:pypi/bikeshed@2.3.1

purl pkg:pypi/bikeshed@2.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.3.1

url pkg:pypi/bikeshed@2.4.0

purl pkg:pypi/bikeshed@2.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.4.0

url pkg:pypi/bikeshed@2.4.1

purl pkg:pypi/bikeshed@2.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.4.1

url pkg:pypi/bikeshed@2.4.2

purl pkg:pypi/bikeshed@2.4.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.4.2

url pkg:pypi/bikeshed@2.4.3

purl pkg:pypi/bikeshed@2.4.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.4.3

url pkg:pypi/bikeshed@2.4.4

purl pkg:pypi/bikeshed@2.4.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.4.4

url pkg:pypi/bikeshed@2.4.5

purl pkg:pypi/bikeshed@2.4.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.4.5

url pkg:pypi/bikeshed@2.4.6

purl pkg:pypi/bikeshed@2.4.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.4.6

url pkg:pypi/bikeshed@2.4.7

purl pkg:pypi/bikeshed@2.4.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-63vz-b8s1-6fdb

vulnerability	VCID-h4ex-q6n4-pyh5

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bikeshed@2.4.7

References

reference_url	https://github.com/advisories/GHSA-87cj-px37-rc3x
reference_id
reference_type
scores
url	https://github.com/advisories/GHSA-87cj-px37-rc3x

reference_url	https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd
reference_id
reference_type
scores
url	https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd

reference_url	https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537646
reference_id
reference_type
scores
url	https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537646

reference_url	https://nvd.nist.gov/vuln/detail/CVE-2021-23422
reference_id	CVE-2021-23422
reference_type
scores
url	https://nvd.nist.gov/vuln/detail/CVE-2021-23422

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	78
name	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
description	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-63vz-b8s1-6fdb

Vulnerability Instance