Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-qka9-ph4t-gfen

Summary

ReDoS via long UserAgent header
An attacker could edit their own headers, creating an arbitrarily long useragent string, causing the event loop and server to block.

Aliases

alias	GMS-2017-108

Fixed_packages

url pkg:npm/useragent@2.1.12

purl pkg:npm/useragent@2.1.12

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.1.12

Affected_packages

url pkg:npm/useragent@0.1.0

purl pkg:npm/useragent@0.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@0.1.0

url pkg:npm/useragent@0.1.1

purl pkg:npm/useragent@0.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@0.1.1

url pkg:npm/useragent@0.1.2

purl pkg:npm/useragent@0.1.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@0.1.2

url pkg:npm/useragent@1.0.0

purl pkg:npm/useragent@1.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@1.0.0

url pkg:npm/useragent@1.0.1

purl pkg:npm/useragent@1.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@1.0.1

url pkg:npm/useragent@1.0.2

purl pkg:npm/useragent@1.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@1.0.2

url pkg:npm/useragent@1.0.3

purl pkg:npm/useragent@1.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@1.0.3

url pkg:npm/useragent@1.0.4

purl pkg:npm/useragent@1.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@1.0.4

url pkg:npm/useragent@1.0.5

purl pkg:npm/useragent@1.0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@1.0.5

url pkg:npm/useragent@1.0.6

purl pkg:npm/useragent@1.0.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@1.0.6

url pkg:npm/useragent@1.1.0

purl pkg:npm/useragent@1.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@1.1.0

url pkg:npm/useragent@2.0.0

purl pkg:npm/useragent@2.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.0.0

url pkg:npm/useragent@2.0.1

purl pkg:npm/useragent@2.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.0.1

url pkg:npm/useragent@2.0.2

purl pkg:npm/useragent@2.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.0.2

url pkg:npm/useragent@2.0.3

purl pkg:npm/useragent@2.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.0.3

url pkg:npm/useragent@2.0.4

purl pkg:npm/useragent@2.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.0.4

url pkg:npm/useragent@2.0.5

purl pkg:npm/useragent@2.0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.0.5

url pkg:npm/useragent@2.0.6

purl pkg:npm/useragent@2.0.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.0.6

url pkg:npm/useragent@2.0.7

purl pkg:npm/useragent@2.0.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.0.7

url pkg:npm/useragent@2.0.8

purl pkg:npm/useragent@2.0.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.0.8

url pkg:npm/useragent@2.0.9

purl pkg:npm/useragent@2.0.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.0.9

url pkg:npm/useragent@2.0.10

purl pkg:npm/useragent@2.0.10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.0.10

url pkg:npm/useragent@2.1.0

purl pkg:npm/useragent@2.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.1.0

url pkg:npm/useragent@2.1.1

purl pkg:npm/useragent@2.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.1.1

url pkg:npm/useragent@2.1.2

purl pkg:npm/useragent@2.1.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.1.2

url pkg:npm/useragent@2.1.3

purl pkg:npm/useragent@2.1.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.1.3

url pkg:npm/useragent@2.1.4

purl pkg:npm/useragent@2.1.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.1.4

url pkg:npm/useragent@2.1.5

purl pkg:npm/useragent@2.1.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.1.5

url pkg:npm/useragent@2.1.6

purl pkg:npm/useragent@2.1.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.1.6

url pkg:npm/useragent@2.1.7

purl pkg:npm/useragent@2.1.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.1.7

url pkg:npm/useragent@2.1.8

purl pkg:npm/useragent@2.1.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.1.8

url pkg:npm/useragent@2.1.9

purl pkg:npm/useragent@2.1.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.1.9

url pkg:npm/useragent@2.1.10

purl pkg:npm/useragent@2.1.10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.1.10

url pkg:npm/useragent@2.1.11

purl pkg:npm/useragent@2.1.11

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-pdhk-f5ew-7bb3

vulnerability	VCID-qka9-ph4t-gfen

vulnerability	VCID-w6kw-sq2j-s7d8

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/useragent@2.1.11

References

reference_url	https://github.com/3rd-Eden/useragent/commit/64b15c9446a24abd9f52ed4ceb970f1a5cf790dd
reference_id
reference_type
scores
url	https://github.com/3rd-Eden/useragent/commit/64b15c9446a24abd9f52ed4ceb970f1a5cf790dd

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score null

Exploitability 0.5

Weighted_severity 0.0

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qka9-ph4t-gfen

Vulnerability Instance