Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/39251?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39251?format=api", "vulnerability_id": "VCID-3xs3-13we-6ffu", "summary": "Code Injection\nSmarty 3 is vulnerable to a PHP code injection when calling `fetch()` or `display()` functions on custom resources that does not sanitize template name.", "aliases": [ { "alias": "CVE-2017-1000480" }, { "alias": "GHSA-9m49-vhwv-422g" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54799?format=api", "purl": "pkg:composer/smarty/smarty@3.1.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/215090?format=api", "purl": "pkg:composer/smarty/smarty@4.3.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a3yk-8fmf-x7fw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@4.3.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/281215?format=api", "purl": "pkg:deb/debian/smarty3@3.1.21-1%2Bdeb8u2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.21-1%252Bdeb8u2" }, { "url": "http://public2.vulnerablecode.io/api/packages/515903?format=api", "purl": "pkg:deb/debian/smarty3@3.1.31%2B20161214.1.c7d42e4%2Bselfpack1-2%2Bdeb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.31%252B20161214.1.c7d42e4%252Bselfpack1-2%252Bdeb9u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/129041?format=api", "purl": "pkg:deb/debian/smarty3@3.1.31%2B20161214.1.c7d42e4%2Bselfpack1-3?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.31%252B20161214.1.c7d42e4%252Bselfpack1-3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/516372?format=api", "purl": "pkg:deb/debian/smarty3@3.1.33%2B20180830.1.3a78a21f%2Bselfpack1-1%2Bdeb10u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.33%252B20180830.1.3a78a21f%252Bselfpack1-1%252Bdeb10u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/129034?format=api", "purl": "pkg:deb/debian/smarty3@3.1.39-2%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.39-2%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/129032?format=api", "purl": "pkg:deb/debian/smarty3@3.1.47-2%2Bdeb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.47-2%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/129035?format=api", "purl": "pkg:deb/debian/smarty3@3.1.48-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.48-2%3Fdistro=trixie" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54798?format=api", "purl": "pkg:composer/smarty/smarty@3.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/200029?format=api", "purl": "pkg:composer/smarty/smarty@3.1.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3nky-rj9a-dyb7" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/155476?format=api", "purl": "pkg:composer/smarty/smarty@3.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/200030?format=api", "purl": "pkg:composer/smarty/smarty@3.1.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/200031?format=api", "purl": "pkg:composer/smarty/smarty@3.1.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/200032?format=api", "purl": "pkg:composer/smarty/smarty@3.1.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/200033?format=api", "purl": "pkg:composer/smarty/smarty@3.1.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/200034?format=api", "purl": "pkg:composer/smarty/smarty@3.1.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/200035?format=api", "purl": "pkg:composer/smarty/smarty@3.1.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/200036?format=api", "purl": "pkg:composer/smarty/smarty@3.1.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/200037?format=api", "purl": "pkg:composer/smarty/smarty@3.1.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/52026?format=api", "purl": "pkg:composer/smarty/smarty@3.1.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/215081?format=api", "purl": "pkg:composer/smarty/smarty@3.1.23", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.23" }, { "url": "http://public2.vulnerablecode.io/api/packages/215082?format=api", "purl": "pkg:composer/smarty/smarty@3.1.24", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.24" }, { "url": "http://public2.vulnerablecode.io/api/packages/215083?format=api", "purl": "pkg:composer/smarty/smarty@3.1.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/215084?format=api", "purl": "pkg:composer/smarty/smarty@3.1.26", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.26" }, { "url": "http://public2.vulnerablecode.io/api/packages/215085?format=api", "purl": "pkg:composer/smarty/smarty@3.1.27", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.27" }, { "url": "http://public2.vulnerablecode.io/api/packages/215086?format=api", "purl": "pkg:composer/smarty/smarty@3.1.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.28" }, { "url": "http://public2.vulnerablecode.io/api/packages/215087?format=api", "purl": "pkg:composer/smarty/smarty@3.1.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/215088?format=api", "purl": "pkg:composer/smarty/smarty@3.1.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/215089?format=api", "purl": "pkg:composer/smarty/smarty@3.1.31", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.31" }, { "url": "http://public2.vulnerablecode.io/api/packages/281209?format=api", "purl": "pkg:deb/debian/smarty3@3.0~rc1-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2zrw-yeaj-1uas" }, { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3nky-rj9a-dyb7" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4amz-egp8-f7dx" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-5avg-sw37-g3ff" }, { "vulnerability": "VCID-9mh2-hv61-6khw" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-dm8f-mnup-1udw" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-t8ym-xckw-vffz" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-w8cn-5dw9-kkg8" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" }, { "vulnerability": "VCID-zqm9-y52a-j3bp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.0~rc1-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/281211?format=api", "purl": "pkg:deb/debian/smarty3@3.1.10-2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4amz-egp8-f7dx" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.10-2" }, { "url": "http://public2.vulnerablecode.io/api/packages/281213?format=api", "purl": "pkg:deb/debian/smarty3@3.1.21-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4amz-egp8-f7dx" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.21-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/281215?format=api", "purl": "pkg:deb/debian/smarty3@3.1.21-1%2Bdeb8u2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.21-1%252Bdeb8u2" }, { "url": "http://public2.vulnerablecode.io/api/packages/515903?format=api", "purl": "pkg:deb/debian/smarty3@3.1.31%2B20161214.1.c7d42e4%2Bselfpack1-2%2Bdeb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.31%252B20161214.1.c7d42e4%252Bselfpack1-2%252Bdeb9u1" } ], "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000480", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00636", "scoring_system": "epss", "scoring_elements": "0.7084", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00636", "scoring_system": "epss", "scoring_elements": "0.70873", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00636", "scoring_system": "epss", "scoring_elements": "0.7089", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00636", "scoring_system": "epss", "scoring_elements": "0.70883", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000480" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000480", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000480" }, { "reference_url": "https://github.com/smarty-php/smarty", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/smarty-php/smarty" }, { "reference_url": "https://github.com/smarty-php/smarty/blob/master/change_log.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/smarty-php/smarty/blob/master/change_log.txt" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2018/01/msg00023.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2018/01/msg00023.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00000.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00000.html" }, { "reference_url": "https://www.debian.org/security/2018/dsa-4094", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2018/dsa-4094" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=886460", "reference_id": "886460", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=886460" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000480", "reference_id": "CVE-2017-1000480", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000480" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 94, "name": "Improper Control of Generation of Code ('Code Injection')", "description": "The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment." } ], "exploits": [], "severity_range_score": "9.0 - 10.0", "exploitability": "0.5", "weighted_severity": "9.0", "risk_score": 4.5, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3xs3-13we-6ffu" }