VulnerableCode.io REST API

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/36954?format=api

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36954?format=api",
    "vulnerability_id": "VCID-k6z5-tv9d-n7ey",
    "summary": "Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, granting access to users with valid credentials, and eventually bypassing custom authentication checks such as two-factor authentication, LDAP validations, or requirements from configured AUTHENTICATION_BACKENDS.",
    "aliases": [
        {
            "alias": "CVE-2024-21543"
        },
        {
            "alias": "PYSEC-2024-158"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44321?format=api",
            "purl": "pkg:pypi/djoser@2.3.0",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@2.3.0"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44275?format=api",
            "purl": "pkg:pypi/djoser@0.0.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.0.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44276?format=api",
            "purl": "pkg:pypi/djoser@0.0.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.0.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44277?format=api",
            "purl": "pkg:pypi/djoser@0.0.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.0.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44278?format=api",
            "purl": "pkg:pypi/djoser@0.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.1.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44279?format=api",
            "purl": "pkg:pypi/djoser@0.2.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.2.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44280?format=api",
            "purl": "pkg:pypi/djoser@0.2.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.2.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44281?format=api",
            "purl": "pkg:pypi/djoser@0.3.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.3.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44282?format=api",
            "purl": "pkg:pypi/djoser@0.3.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.3.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44283?format=api",
            "purl": "pkg:pypi/djoser@0.3.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.3.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44284?format=api",
            "purl": "pkg:pypi/djoser@0.4.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.4.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44285?format=api",
            "purl": "pkg:pypi/djoser@0.4.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.4.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44286?format=api",
            "purl": "pkg:pypi/djoser@0.4.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.4.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44287?format=api",
            "purl": "pkg:pypi/djoser@0.4.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.4.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44288?format=api",
            "purl": "pkg:pypi/djoser@0.5.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.5.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44289?format=api",
            "purl": "pkg:pypi/djoser@0.5.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.5.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44290?format=api",
            "purl": "pkg:pypi/djoser@0.5.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.5.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44291?format=api",
            "purl": "pkg:pypi/djoser@0.5.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.5.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44292?format=api",
            "purl": "pkg:pypi/djoser@0.5.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.5.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44293?format=api",
            "purl": "pkg:pypi/djoser@0.6.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.6.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44294?format=api",
            "purl": "pkg:pypi/djoser@0.7.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@0.7.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44295?format=api",
            "purl": "pkg:pypi/djoser@1.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@1.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44296?format=api",
            "purl": "pkg:pypi/djoser@1.0.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@1.0.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44297?format=api",
            "purl": "pkg:pypi/djoser@1.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@1.1.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44298?format=api",
            "purl": "pkg:pypi/djoser@1.1.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@1.1.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44299?format=api",
            "purl": "pkg:pypi/djoser@1.1.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@1.1.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44300?format=api",
            "purl": "pkg:pypi/djoser@1.1.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@1.1.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44301?format=api",
            "purl": "pkg:pypi/djoser@1.1.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@1.1.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44302?format=api",
            "purl": "pkg:pypi/djoser@1.1.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@1.1.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44303?format=api",
            "purl": "pkg:pypi/djoser@1.2.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@1.2.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44304?format=api",
            "purl": "pkg:pypi/djoser@1.3.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@1.3.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44305?format=api",
            "purl": "pkg:pypi/djoser@1.4.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@1.4.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44306?format=api",
            "purl": "pkg:pypi/djoser@1.5.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@1.5.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44307?format=api",
            "purl": "pkg:pypi/djoser@1.6.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@1.6.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44308?format=api",
            "purl": "pkg:pypi/djoser@1.7.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@1.7.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44309?format=api",
            "purl": "pkg:pypi/djoser@2.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@2.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44310?format=api",
            "purl": "pkg:pypi/djoser@2.0.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@2.0.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44311?format=api",
            "purl": "pkg:pypi/djoser@2.0.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@2.0.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44312?format=api",
            "purl": "pkg:pypi/djoser@2.0.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@2.0.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44313?format=api",
            "purl": "pkg:pypi/djoser@2.0.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@2.0.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44314?format=api",
            "purl": "pkg:pypi/djoser@2.0.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@2.0.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44315?format=api",
            "purl": "pkg:pypi/djoser@2.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@2.1.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44316?format=api",
            "purl": "pkg:pypi/djoser@2.2.0a0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@2.2.0a0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44317?format=api",
            "purl": "pkg:pypi/djoser@2.2.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@2.2.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44318?format=api",
            "purl": "pkg:pypi/djoser@2.2.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@2.2.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44319?format=api",
            "purl": "pkg:pypi/djoser@2.2.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@2.2.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44320?format=api",
            "purl": "pkg:pypi/djoser@2.2.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-k6z5-tv9d-n7ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/djoser@2.2.3"
        }
    ],
    "references": [
        {
            "reference_url": "https://github.com/sunscrapers/djoser/commit/d33c3993c0c735f23cbedc60fa59fce69354f19d",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/sunscrapers/djoser/commit/d33c3993c0c735f23cbedc60fa59fce69354f19d"
        },
        {
            "reference_url": "https://github.com/sunscrapers/djoser/issues/795",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/sunscrapers/djoser/issues/795"
        },
        {
            "reference_url": "https://github.com/sunscrapers/djoser/pull/819",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/sunscrapers/djoser/pull/819"
        },
        {
            "reference_url": "https://github.com/sunscrapers/djoser/releases/tag/2.3.0",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/sunscrapers/djoser/releases/tag/2.3.0"
        },
        {
            "reference_url": "https://security.snyk.io/vuln/SNYK-PYTHON-DJOSER-8366540",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://security.snyk.io/vuln/SNYK-PYTHON-DJOSER-8366540"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": null,
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k6z5-tv9d-n7ey"
}

Vulnerability Instance