Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/40249?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40249?format=api", "vulnerability_id": "VCID-d7cx-7mkv-3qhe", "summary": "Path Traversal\n`Smarty_Security::isTrustedResourceDir()` in Smarty is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files.", "aliases": [ { "alias": "CVE-2018-13982" }, { "alias": "GHSA-7gfx-wxfh-7rvm" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56421?format=api", "purl": "pkg:composer/smarty/smarty@3.1.33", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.33" }, { "url": "http://public2.vulnerablecode.io/api/packages/129042?format=api", "purl": "pkg:deb/debian/smarty3@3.1.33%2B20180830.1.3a78a21f%2Bselfpack1-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.33%252B20180830.1.3a78a21f%252Bselfpack1-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/516372?format=api", "purl": "pkg:deb/debian/smarty3@3.1.33%2B20180830.1.3a78a21f%2Bselfpack1-1%2Bdeb10u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.33%252B20180830.1.3a78a21f%252Bselfpack1-1%252Bdeb10u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/129034?format=api", "purl": "pkg:deb/debian/smarty3@3.1.39-2%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.39-2%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/129032?format=api", "purl": "pkg:deb/debian/smarty3@3.1.47-2%2Bdeb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.47-2%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/129035?format=api", "purl": "pkg:deb/debian/smarty3@3.1.48-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.48-2%3Fdistro=trixie" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/200024?format=api", "purl": "pkg:composer/smarty/smarty@2.6.24", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3nky-rj9a-dyb7" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-5avg-sw37-g3ff" }, { "vulnerability": "VCID-b4d4-pqtp-wbek" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.24" }, { "url": "http://public2.vulnerablecode.io/api/packages/200025?format=api", "purl": "pkg:composer/smarty/smarty@2.6.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3nky-rj9a-dyb7" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-5avg-sw37-g3ff" }, { "vulnerability": "VCID-b4d4-pqtp-wbek" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/200026?format=api", "purl": "pkg:composer/smarty/smarty@2.6.26", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3nky-rj9a-dyb7" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-5avg-sw37-g3ff" }, { "vulnerability": "VCID-b4d4-pqtp-wbek" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.26" }, { "url": "http://public2.vulnerablecode.io/api/packages/200027?format=api", "purl": "pkg:composer/smarty/smarty@2.6.27", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3nky-rj9a-dyb7" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-5avg-sw37-g3ff" }, { "vulnerability": "VCID-b4d4-pqtp-wbek" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.27" }, { "url": "http://public2.vulnerablecode.io/api/packages/200028?format=api", "purl": "pkg:composer/smarty/smarty@2.6.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3nky-rj9a-dyb7" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-5avg-sw37-g3ff" }, { "vulnerability": "VCID-b4d4-pqtp-wbek" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.28" }, { "url": "http://public2.vulnerablecode.io/api/packages/224851?format=api", "purl": "pkg:composer/smarty/smarty@2.6.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3nky-rj9a-dyb7" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-5avg-sw37-g3ff" }, { "vulnerability": "VCID-b4d4-pqtp-wbek" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/224852?format=api", "purl": "pkg:composer/smarty/smarty@2.6.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3nky-rj9a-dyb7" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-5avg-sw37-g3ff" }, { "vulnerability": "VCID-b4d4-pqtp-wbek" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/224853?format=api", "purl": "pkg:composer/smarty/smarty@2.6.31", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3nky-rj9a-dyb7" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-5avg-sw37-g3ff" }, { "vulnerability": "VCID-b4d4-pqtp-wbek" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.31" }, { "url": "http://public2.vulnerablecode.io/api/packages/200029?format=api", "purl": "pkg:composer/smarty/smarty@3.1.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3nky-rj9a-dyb7" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/155476?format=api", "purl": "pkg:composer/smarty/smarty@3.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/200030?format=api", "purl": "pkg:composer/smarty/smarty@3.1.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/200031?format=api", "purl": "pkg:composer/smarty/smarty@3.1.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/200032?format=api", "purl": "pkg:composer/smarty/smarty@3.1.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/200033?format=api", "purl": "pkg:composer/smarty/smarty@3.1.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/200034?format=api", "purl": "pkg:composer/smarty/smarty@3.1.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/200035?format=api", "purl": "pkg:composer/smarty/smarty@3.1.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/200036?format=api", "purl": "pkg:composer/smarty/smarty@3.1.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/200037?format=api", "purl": "pkg:composer/smarty/smarty@3.1.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/52026?format=api", "purl": "pkg:composer/smarty/smarty@3.1.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/215081?format=api", "purl": "pkg:composer/smarty/smarty@3.1.23", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.23" }, { "url": "http://public2.vulnerablecode.io/api/packages/215082?format=api", "purl": "pkg:composer/smarty/smarty@3.1.24", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.24" }, { "url": "http://public2.vulnerablecode.io/api/packages/215083?format=api", "purl": "pkg:composer/smarty/smarty@3.1.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/215084?format=api", "purl": "pkg:composer/smarty/smarty@3.1.26", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.26" }, { "url": "http://public2.vulnerablecode.io/api/packages/215085?format=api", "purl": "pkg:composer/smarty/smarty@3.1.27", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.27" }, { "url": "http://public2.vulnerablecode.io/api/packages/215086?format=api", "purl": "pkg:composer/smarty/smarty@3.1.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.28" }, { "url": "http://public2.vulnerablecode.io/api/packages/215087?format=api", "purl": "pkg:composer/smarty/smarty@3.1.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/215088?format=api", "purl": "pkg:composer/smarty/smarty@3.1.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/215089?format=api", "purl": "pkg:composer/smarty/smarty@3.1.31", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.31" }, { "url": "http://public2.vulnerablecode.io/api/packages/54799?format=api", "purl": "pkg:composer/smarty/smarty@3.1.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-qnee-xruu-sfb1" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/281209?format=api", "purl": "pkg:deb/debian/smarty3@3.0~rc1-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2zrw-yeaj-1uas" }, { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3nky-rj9a-dyb7" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4amz-egp8-f7dx" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-5avg-sw37-g3ff" }, { "vulnerability": "VCID-9mh2-hv61-6khw" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-dm8f-mnup-1udw" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-t8ym-xckw-vffz" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-w8cn-5dw9-kkg8" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" }, { "vulnerability": "VCID-zqm9-y52a-j3bp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.0~rc1-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/281211?format=api", "purl": "pkg:deb/debian/smarty3@3.1.10-2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4amz-egp8-f7dx" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-rr48-d56n-hugj" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.10-2" }, { "url": "http://public2.vulnerablecode.io/api/packages/281213?format=api", "purl": "pkg:deb/debian/smarty3@3.1.21-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4amz-egp8-f7dx" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.21-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/281215?format=api", "purl": "pkg:deb/debian/smarty3@3.1.21-1%2Bdeb8u2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.21-1%252Bdeb8u2" }, { "url": "http://public2.vulnerablecode.io/api/packages/515903?format=api", "purl": "pkg:deb/debian/smarty3@3.1.31%2B20161214.1.c7d42e4%2Bselfpack1-2%2Bdeb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3829-yarc-yqh3" }, { "vulnerability": "VCID-3xs3-13we-6ffu" }, { "vulnerability": "VCID-4dmb-dnk6-6qdd" }, { "vulnerability": "VCID-a3yk-8fmf-x7fw" }, { "vulnerability": "VCID-d7cx-7mkv-3qhe" }, { "vulnerability": "VCID-h2k4-cqfq-sbhw" }, { "vulnerability": "VCID-jhg5-tdyz-uyh4" }, { "vulnerability": "VCID-mmfc-us8q-xbha" }, { "vulnerability": "VCID-vnb9-5w8q-r3bd" }, { "vulnerability": "VCID-xmrr-2jyf-5yhj" }, { "vulnerability": "VCID-zgxx-cfyu-1ffy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.31%252B20161214.1.c7d42e4%252Bselfpack1-2%252Bdeb9u1" } ], "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-13982", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02331", "scoring_system": "epss", "scoring_elements": "0.85129", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.02331", "scoring_system": "epss", "scoring_elements": "0.85158", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.02331", "scoring_system": "epss", "scoring_elements": "0.85153", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-13982" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13982", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13982" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/smarty/smarty/CVE-2018-13982.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/smarty/smarty/CVE-2018-13982.yaml" }, { "reference_url": "https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180420-01_Smarty_Path_Traversal", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180420-01_Smarty_Path_Traversal" }, { "reference_url": "https://github.com/smarty-php/smarty", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/smarty-php/smarty" }, { "reference_url": "https://github.com/smarty-php/smarty/commit/2e081a51b1effddb23f87952959139ac62654d50", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/smarty-php/smarty/commit/2e081a51b1effddb23f87952959139ac62654d50" }, { "reference_url": "https://github.com/smarty-php/smarty/commit/8d21f38dc35c4cd6b31c2f23fc9b8e5adbc56dfe", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/smarty-php/smarty/commit/8d21f38dc35c4cd6b31c2f23fc9b8e5adbc56dfe" }, { "reference_url": "https://github.com/smarty-php/smarty/commit/bcedfd6b58bed4a7366336979ebaa5a240581531", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/smarty-php/smarty/commit/bcedfd6b58bed4a7366336979ebaa5a240581531" }, { "reference_url": "https://github.com/smarty-php/smarty/commit/c9dbe1d08c081912d02bd851d1d1b6388f6133d1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/smarty-php/smarty/commit/c9dbe1d08c081912d02bd851d1d1b6388f6133d1" }, { "reference_url": "https://github.com/smarty-php/smarty/commit/f9ca3c63d1250bb56b2bda609dcc9dd81f0065f8", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/smarty-php/smarty/commit/f9ca3c63d1250bb56b2bda609dcc9dd81f0065f8" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00015.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00015.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-13982", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-13982" }, { "reference_url": "https://github.com/advisories/GHSA-7gfx-wxfh-7rvm", "reference_id": "GHSA-7gfx-wxfh-7rvm", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-7gfx-wxfh-7rvm" }, { "reference_url": "https://usn.ubuntu.com/5348-1/", "reference_id": "USN-5348-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5348-1/" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 22, "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "description": "The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": "7.0 - 8.9", "exploitability": "0.5", "weighted_severity": "8.0", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d7cx-7mkv-3qhe" }