Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/37050?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37050?format=api", "vulnerability_id": "VCID-jfcq-vpg2-pkdn", "summary": "The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization.", "aliases": [ { "alias": "CVE-2025-46417" }, { "alias": "GHSA-93mv-x874-956g" }, { "alias": "PYSEC-2025-34" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/45028?format=api", "purl": "pkg:pypi/picklescan@0.0.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.25" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/44391?format=api", "purl": "pkg:pypi/picklescan@0.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/44392?format=api", "purl": "pkg:pypi/picklescan@0.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/44393?format=api", "purl": "pkg:pypi/picklescan@0.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/44394?format=api", "purl": "pkg:pypi/picklescan@0.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/44395?format=api", "purl": "pkg:pypi/picklescan@0.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/44396?format=api", "purl": "pkg:pypi/picklescan@0.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/44397?format=api", "purl": "pkg:pypi/picklescan@0.0.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/44398?format=api", "purl": "pkg:pypi/picklescan@0.0.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/44399?format=api", "purl": "pkg:pypi/picklescan@0.0.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/44400?format=api", "purl": "pkg:pypi/picklescan@0.0.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/44401?format=api", "purl": "pkg:pypi/picklescan@0.0.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/44402?format=api", "purl": "pkg:pypi/picklescan@0.0.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/44403?format=api", "purl": "pkg:pypi/picklescan@0.0.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/44404?format=api", "purl": "pkg:pypi/picklescan@0.0.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/44405?format=api", "purl": "pkg:pypi/picklescan@0.0.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/44406?format=api", "purl": "pkg:pypi/picklescan@0.0.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/44407?format=api", "purl": "pkg:pypi/picklescan@0.0.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/44408?format=api", "purl": "pkg:pypi/picklescan@0.0.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/44409?format=api", "purl": "pkg:pypi/picklescan@0.0.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/44410?format=api", "purl": "pkg:pypi/picklescan@0.0.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/44411?format=api", "purl": "pkg:pypi/picklescan@0.0.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-nvvk-8a8j-43gw" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/44475?format=api", "purl": "pkg:pypi/picklescan@0.0.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-ag3v-g92v-kbde" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" }, { "vulnerability": "VCID-w2h9-74te-tqhc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/44604?format=api", "purl": "pkg:pypi/picklescan@0.0.23", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.23" }, { "url": "http://public2.vulnerablecode.io/api/packages/45027?format=api", "purl": "pkg:pypi/picklescan@0.0.24", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2syv-syp1-6yhk" }, { "vulnerability": "VCID-auku-kbg2-2ybg" }, { "vulnerability": "VCID-avk4-jaz6-m3gw" }, { "vulnerability": "VCID-jfcq-vpg2-pkdn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.24" } ], "references": [ { "reference_url": "https://github.com/advisories/GHSA-93mv-x874-956g", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-93mv-x874-956g" }, { "reference_url": "https://github.com/mmaitre314/picklescan/pull/40", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/mmaitre314/picklescan/pull/40" } ], "weaknesses": [], "exploits": [], "severity_range_score": null, "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jfcq-vpg2-pkdn" }