Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-vgrv-3ab7-sqfx

Summary This package is vulnerable to Information Exposure. When an exception message occurs, it contains the full path of the project directory.

Aliases

alias	GMS-2014-3

Fixed_packages

url pkg:gem/carrierwave@1.0.0.beta

purl pkg:gem/carrierwave@1.0.0.beta

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@1.0.0.beta

Affected_packages

url pkg:gem/carrierwave@0.1

purl pkg:gem/carrierwave@0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.1

url pkg:gem/carrierwave@0.2.0

purl pkg:gem/carrierwave@0.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.2.0

url pkg:gem/carrierwave@0.2.1

purl pkg:gem/carrierwave@0.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.2.1

url pkg:gem/carrierwave@0.2.3

purl pkg:gem/carrierwave@0.2.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.2.3

url pkg:gem/carrierwave@0.2.4

purl pkg:gem/carrierwave@0.2.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.2.4

url pkg:gem/carrierwave@0.3.0

purl pkg:gem/carrierwave@0.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.3.0

url pkg:gem/carrierwave@0.3.1

purl pkg:gem/carrierwave@0.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.3.1

url pkg:gem/carrierwave@0.3.2

purl pkg:gem/carrierwave@0.3.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.3.2

url pkg:gem/carrierwave@0.3.3

purl pkg:gem/carrierwave@0.3.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.3.3

url pkg:gem/carrierwave@0.3.4

purl pkg:gem/carrierwave@0.3.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.3.4

url pkg:gem/carrierwave@0.3.5

purl pkg:gem/carrierwave@0.3.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.3.5

url pkg:gem/carrierwave@0.3.5.1

purl pkg:gem/carrierwave@0.3.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.3.5.1

url pkg:gem/carrierwave@0.3.5.2

purl pkg:gem/carrierwave@0.3.5.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.3.5.2

url pkg:gem/carrierwave@0.4.0

purl pkg:gem/carrierwave@0.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.4.0

url pkg:gem/carrierwave@0.4.1

purl pkg:gem/carrierwave@0.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.4.1

url pkg:gem/carrierwave@0.4.2

purl pkg:gem/carrierwave@0.4.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.4.2

url pkg:gem/carrierwave@0.4.3

purl pkg:gem/carrierwave@0.4.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.4.3

url pkg:gem/carrierwave@0.4.4

purl pkg:gem/carrierwave@0.4.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.4.4

url pkg:gem/carrierwave@0.4.5

purl pkg:gem/carrierwave@0.4.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.4.5

url pkg:gem/carrierwave@0.4.6

purl pkg:gem/carrierwave@0.4.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.4.6

url pkg:gem/carrierwave@0.4.7

purl pkg:gem/carrierwave@0.4.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.4.7

url pkg:gem/carrierwave@0.4.8

purl pkg:gem/carrierwave@0.4.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.4.8

url pkg:gem/carrierwave@0.4.9

purl pkg:gem/carrierwave@0.4.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.4.9

url pkg:gem/carrierwave@0.4.10

purl pkg:gem/carrierwave@0.4.10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.4.10

url pkg:gem/carrierwave@0.5.0.beta2

purl pkg:gem/carrierwave@0.5.0.beta2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.5.0.beta2

url pkg:gem/carrierwave@0.5.0

purl pkg:gem/carrierwave@0.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.5.0

url pkg:gem/carrierwave@0.5.1

purl pkg:gem/carrierwave@0.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.5.1

url pkg:gem/carrierwave@0.5.2

purl pkg:gem/carrierwave@0.5.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.5.2

url pkg:gem/carrierwave@0.5.3

purl pkg:gem/carrierwave@0.5.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.5.3

url pkg:gem/carrierwave@0.5.4

purl pkg:gem/carrierwave@0.5.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.5.4

url pkg:gem/carrierwave@0.5.5

purl pkg:gem/carrierwave@0.5.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.5.5

url pkg:gem/carrierwave@0.5.6

purl pkg:gem/carrierwave@0.5.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.5.6

url pkg:gem/carrierwave@0.5.7

purl pkg:gem/carrierwave@0.5.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.5.7

url pkg:gem/carrierwave@0.5.8

purl pkg:gem/carrierwave@0.5.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.5.8

url pkg:gem/carrierwave@0.6.0

purl pkg:gem/carrierwave@0.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.6.0

url pkg:gem/carrierwave@0.6.1

purl pkg:gem/carrierwave@0.6.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.6.1

url pkg:gem/carrierwave@0.6.2

purl pkg:gem/carrierwave@0.6.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.6.2

url pkg:gem/carrierwave@0.7.0

purl pkg:gem/carrierwave@0.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.7.0

url pkg:gem/carrierwave@0.7.1

purl pkg:gem/carrierwave@0.7.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.7.1

url pkg:gem/carrierwave@0.8.0

purl pkg:gem/carrierwave@0.8.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.8.0

url pkg:gem/carrierwave@0.9.0

purl pkg:gem/carrierwave@0.9.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.9.0

url pkg:gem/carrierwave@0.10.0

purl pkg:gem/carrierwave@0.10.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8qcp-bmgq-wye6

vulnerability	VCID-gfzv-e2cs-c3dz

vulnerability	VCID-hway-mr71-cqgj

vulnerability	VCID-phc1-hxmj-4qdw

vulnerability	VCID-vgrv-3ab7-sqfx

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/carrierwave@0.10.0

References

reference_url	https://github.com/carrierwaveuploader/carrierwave/commit/96314bb42c32d6b24278474e1c877b53a88bfaf8
reference_id
reference_type
scores
url	https://github.com/carrierwaveuploader/carrierwave/commit/96314bb42c32d6b24278474e1c877b53a88bfaf8

reference_url	https://github.com/carrierwaveuploader/carrierwave/pull/1361
reference_id
reference_type
scores
url	https://github.com/carrierwaveuploader/carrierwave/pull/1361

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vgrv-3ab7-sqfx

Vulnerability Instance