Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-94sx-qnsn-5ucm

Summary Multiple vulnerabilities have been discovered in nghttp2, the worst of which could lead to a denial of service.

Aliases

alias	CVE-2024-28182

Fixed_packages

url pkg:deb/debian/nghttp2@1.43.0-1%2Bdeb11u1?distro=trixie

purl pkg:deb/debian/nghttp2@1.43.0-1%2Bdeb11u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-gv39-q6pw-yfh4

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nghttp2@1.43.0-1%252Bdeb11u1%3Fdistro=trixie

url	pkg:deb/debian/nghttp2@1.43.0-1%2Bdeb11u2?distro=trixie
purl	pkg:deb/debian/nghttp2@1.43.0-1%2Bdeb11u2?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/nghttp2@1.43.0-1%252Bdeb11u2%3Fdistro=trixie

url pkg:deb/debian/nghttp2@1.52.0-1%2Bdeb12u2?distro=trixie

purl pkg:deb/debian/nghttp2@1.52.0-1%2Bdeb12u2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-gv39-q6pw-yfh4

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nghttp2@1.52.0-1%252Bdeb12u2%3Fdistro=trixie

url pkg:deb/debian/nghttp2@1.52.0-1%2Bdeb12u2

purl pkg:deb/debian/nghttp2@1.52.0-1%2Bdeb12u2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-gv39-q6pw-yfh4

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nghttp2@1.52.0-1%252Bdeb12u2

url	pkg:deb/debian/nghttp2@1.61.0-1?distro=trixie
purl	pkg:deb/debian/nghttp2@1.61.0-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/nghttp2@1.61.0-1%3Fdistro=trixie

url pkg:deb/debian/nghttp2@1.64.0-1.1?distro=trixie

purl pkg:deb/debian/nghttp2@1.64.0-1.1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-gv39-q6pw-yfh4

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nghttp2@1.64.0-1.1%3Fdistro=trixie

url	pkg:deb/debian/nghttp2@1.68.1-1?distro=trixie
purl	pkg:deb/debian/nghttp2@1.68.1-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/nghttp2@1.68.1-1%3Fdistro=trixie

url	pkg:ebuild/net-libs/nghttp2@1.61.0
purl	pkg:ebuild/net-libs/nghttp2@1.61.0
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/net-libs/nghttp2@1.61.0

Affected_packages

url pkg:deb/debian/nghttp2@0.6.4-2~bpo70%2B1

purl pkg:deb/debian/nghttp2@0.6.4-2~bpo70%2B1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-17k5-vadp-4kby

vulnerability	VCID-5781-s1ny-q7ey

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-9hzg-r1fj-pubf

vulnerability	VCID-d26w-y23c-q7d1

vulnerability	VCID-dmv4-ydq9-a7eq

vulnerability	VCID-gbnt-abha-47eu

vulnerability	VCID-gcuf-2uct-ykcu

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nghttp2@0.6.4-2~bpo70%252B1

url pkg:deb/debian/nghttp2@0.6.4-2

purl pkg:deb/debian/nghttp2@0.6.4-2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-17k5-vadp-4kby

vulnerability	VCID-5781-s1ny-q7ey

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-9hzg-r1fj-pubf

vulnerability	VCID-d26w-y23c-q7d1

vulnerability	VCID-dmv4-ydq9-a7eq

vulnerability	VCID-gbnt-abha-47eu

vulnerability	VCID-gcuf-2uct-ykcu

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nghttp2@0.6.4-2

url pkg:deb/debian/nghttp2@1.18.1-1%2Bdeb9u1

purl pkg:deb/debian/nghttp2@1.18.1-1%2Bdeb9u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-17k5-vadp-4kby

vulnerability	VCID-5781-s1ny-q7ey

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-9hzg-r1fj-pubf

vulnerability	VCID-dmv4-ydq9-a7eq

vulnerability	VCID-gcuf-2uct-ykcu

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nghttp2@1.18.1-1%252Bdeb9u1

url pkg:deb/debian/nghttp2@1.36.0-2%2Bdeb10u1

purl pkg:deb/debian/nghttp2@1.36.0-2%2Bdeb10u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-17k5-vadp-4kby

vulnerability	VCID-5781-s1ny-q7ey

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-9hzg-r1fj-pubf

vulnerability	VCID-dmv4-ydq9-a7eq

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nghttp2@1.36.0-2%252Bdeb10u1

url pkg:deb/debian/nghttp2@1.43.0-1%2Bdeb11u1

purl pkg:deb/debian/nghttp2@1.43.0-1%2Bdeb11u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-gv39-q6pw-yfh4

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nghttp2@1.43.0-1%252Bdeb11u1

url pkg:rpm/redhat/jbcs-httpd24-curl@8.7.1-2?arch=el7jbcs

purl pkg:rpm/redhat/jbcs-httpd24-curl@8.7.1-2?arch=el7jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-curl@8.7.1-2%3Farch=el7jbcs

url pkg:rpm/redhat/jbcs-httpd24-curl@8.7.1-2?arch=el8jbcs

purl pkg:rpm/redhat/jbcs-httpd24-curl@8.7.1-2?arch=el8jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-curl@8.7.1-2%3Farch=el8jbcs

url pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.57-10?arch=el8jbcs

purl pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.57-10?arch=el8jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.57-10%3Farch=el8jbcs

url pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.57-10?arch=el7jbcs

purl pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.57-10?arch=el7jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.57-10%3Farch=el7jbcs

url pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-37?arch=el7jbcs

purl pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-37?arch=el7jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-37%3Farch=el7jbcs

url pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-37?arch=el8jbcs

purl pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-37?arch=el8jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-37%3Farch=el8jbcs

url pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.49-6.redhat_1?arch=el7jbcs

purl pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.49-6.redhat_1?arch=el7jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.49-6.redhat_1%3Farch=el7jbcs

url pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.49-6.redhat_1?arch=el8jbcs

purl pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.49-6.redhat_1?arch=el8jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.49-6.redhat_1%3Farch=el8jbcs

url pkg:rpm/redhat/jbcs-httpd24-mod_md@1:2.4.24-6?arch=el8jbcs

purl pkg:rpm/redhat/jbcs-httpd24-mod_md@1:2.4.24-6?arch=el8jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_md@1:2.4.24-6%3Farch=el8jbcs

url pkg:rpm/redhat/jbcs-httpd24-mod_md@1:2.4.24-6?arch=el7jbcs

purl pkg:rpm/redhat/jbcs-httpd24-mod_md@1:2.4.24-6?arch=el7jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_md@1:2.4.24-6%3Farch=el7jbcs

url pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.20-4?arch=el8jbcs

purl pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.20-4?arch=el8jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.20-4%3Farch=el8jbcs

url pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.20-4?arch=el7jbcs

purl pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.20-4?arch=el7jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.20-4%3Farch=el7jbcs

url pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-36?arch=el8jbcs

purl pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-36?arch=el8jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-36%3Farch=el8jbcs

url pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-36?arch=el7jbcs

purl pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-36?arch=el7jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-36%3Farch=el7jbcs

url pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.43.0-13?arch=el7jbcs

purl pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.43.0-13?arch=el7jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.43.0-13%3Farch=el7jbcs

url pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.43.0-13?arch=el8jbcs

purl pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.43.0-13?arch=el8jbcs

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2e6w-fs4j-17g9

vulnerability	VCID-2szj-xvgq-pkfr

vulnerability	VCID-2vwu-y316-gbb2

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-tha5-fv3w-sub6

vulnerability	VCID-u4bx-xqb3-vuef

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.43.0-13%3Farch=el8jbcs

url pkg:rpm/redhat/nghttp2@1.33.0-3.el8_2?arch=3

purl pkg:rpm/redhat/nghttp2@1.33.0-3.el8_2?arch=3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-94sx-qnsn-5ucm

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nghttp2@1.33.0-3.el8_2%3Farch=3

url pkg:rpm/redhat/nghttp2@1.33.0-4.el8_4?arch=2

purl pkg:rpm/redhat/nghttp2@1.33.0-4.el8_4?arch=2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-94sx-qnsn-5ucm

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nghttp2@1.33.0-4.el8_4%3Farch=2

url pkg:rpm/redhat/nghttp2@1.33.0-4.el8_6?arch=2

purl pkg:rpm/redhat/nghttp2@1.33.0-4.el8_6?arch=2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-94sx-qnsn-5ucm

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nghttp2@1.33.0-4.el8_6%3Farch=2

url pkg:rpm/redhat/nghttp2@1.33.0-5.el8_8?arch=1

purl pkg:rpm/redhat/nghttp2@1.33.0-5.el8_8?arch=1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-94sx-qnsn-5ucm

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nghttp2@1.33.0-5.el8_8%3Farch=1

url pkg:rpm/redhat/nghttp2@1.33.0-6.el8_10?arch=1

purl pkg:rpm/redhat/nghttp2@1.33.0-6.el8_10?arch=1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-94sx-qnsn-5ucm

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nghttp2@1.33.0-6.el8_10%3Farch=1

url pkg:rpm/redhat/nghttp2@1.43.0-5.el9_0?arch=3

purl pkg:rpm/redhat/nghttp2@1.43.0-5.el9_0?arch=3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-94sx-qnsn-5ucm

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nghttp2@1.43.0-5.el9_0%3Farch=3

url pkg:rpm/redhat/nghttp2@1.43.0-5.el9_2?arch=3

purl pkg:rpm/redhat/nghttp2@1.43.0-5.el9_2?arch=3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-94sx-qnsn-5ucm

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nghttp2@1.43.0-5.el9_2%3Farch=3

url pkg:rpm/redhat/nghttp2@1.43.0-5.el9_4?arch=3

purl pkg:rpm/redhat/nghttp2@1.43.0-5.el9_4?arch=3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-94sx-qnsn-5ucm

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nghttp2@1.43.0-5.el9_4%3Farch=3

url pkg:rpm/redhat/nodejs@1:16.20.2-5.el9_2?arch=3

purl pkg:rpm/redhat/nodejs@1:16.20.2-5.el9_2?arch=3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-nenk-4cgd-fugv

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nodejs@1:16.20.2-5.el9_2%3Farch=3

url pkg:rpm/redhat/nodejs@1:16.20.2-8?arch=el9_4

purl pkg:rpm/redhat/nodejs@1:16.20.2-8?arch=el9_4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2z1f-7jkw-17av

vulnerability	VCID-3hy7-94d4-kyev

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-bx67-aud6-b3fa

vulnerability	VCID-nenk-4cgd-fugv

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nodejs@1:16.20.2-8%3Farch=el9_4

url pkg:rpm/redhat/nodejs@1:16.20.2-9?arch=el9_0

purl pkg:rpm/redhat/nodejs@1:16.20.2-9?arch=el9_0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3hy7-94d4-kyev

vulnerability	VCID-94sx-qnsn-5ucm

vulnerability	VCID-bx67-aud6-b3fa

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nodejs@1:16.20.2-9%3Farch=el9_0

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-28182.json

reference_id

reference_type

scores

value	5.3
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-28182.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2024-28182

reference_id

reference_type

scores

value	0.24971
scoring_system	epss
scoring_elements	0.96164
published_at	2026-04-12T12:55:00Z

value	0.24971
scoring_system	epss
scoring_elements	0.96174
published_at	2026-04-16T12:55:00Z

value	0.24971
scoring_system	epss
scoring_elements	0.96165
published_at	2026-04-13T12:55:00Z

value	0.24971
scoring_system	epss
scoring_elements	0.96136
published_at	2026-04-02T12:55:00Z

value	0.24971
scoring_system	epss
scoring_elements	0.96143
published_at	2026-04-04T12:55:00Z

value	0.24971
scoring_system	epss
scoring_elements	0.96147
published_at	2026-04-07T12:55:00Z

value	0.24971
scoring_system	epss
scoring_elements	0.96157
published_at	2026-04-08T12:55:00Z

value	0.24971
scoring_system	epss
scoring_elements	0.96161
published_at	2026-04-09T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2024-28182

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28182
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28182

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url

https://github.com/nghttp2/nghttp2/commit/00201ecd8f982da3b67d4f6868af72a1b03b14e0

reference_id

00201ecd8f982da3b67d4f6868af72a1b03b14e0

reference_type

scores

value	5.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-04T17:15:08Z/

url

https://github.com/nghttp2/nghttp2/commit/00201ecd8f982da3b67d4f6868af72a1b03b14e0

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068415
reference_id	1068415
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068415

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=2268639
reference_id	2268639
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=2268639

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGOME6ZXJG7664IPQNVE3DL67E3YP3HY/

reference_id

AGOME6ZXJG7664IPQNVE3DL67E3YP3HY

reference_type

scores

value	5.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-04T17:15:08Z/

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGOME6ZXJG7664IPQNVE3DL67E3YP3HY/

reference_url

https://github.com/nghttp2/nghttp2/commit/d71a4668c6bead55805d18810d633fbb98315af9

reference_id

d71a4668c6bead55805d18810d633fbb98315af9

reference_type

scores

value	5.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-04T17:15:08Z/

url

https://github.com/nghttp2/nghttp2/commit/d71a4668c6bead55805d18810d633fbb98315af9

reference_url

https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q

reference_id

GHSA-x6x3-gv8h-m57q

reference_type

scores

value	5.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-04T17:15:08Z/

url

https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q

reference_url	https://security.gentoo.org/glsa/202408-10
reference_id	GLSA-202408-10
reference_type
scores
url	https://security.gentoo.org/glsa/202408-10

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J6ZMXUGB66VAXDW5J6QSTHM5ET25FGSA/

reference_id

J6ZMXUGB66VAXDW5J6QSTHM5ET25FGSA

reference_type

scores

value	5.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-04T17:15:08Z/

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J6ZMXUGB66VAXDW5J6QSTHM5ET25FGSA/

reference_url

https://lists.debian.org/debian-lts-announce/2024/04/msg00026.html

reference_id

msg00026.html

reference_type

scores

value	5.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-04T17:15:08Z/

url

https://lists.debian.org/debian-lts-announce/2024/04/msg00026.html

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXJO2EASHM2OQQLGVDY5ZSO7UVDVHTDK/

reference_id

PXJO2EASHM2OQQLGVDY5ZSO7UVDVHTDK

reference_type

scores

value	5.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-04T17:15:08Z/

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXJO2EASHM2OQQLGVDY5ZSO7UVDVHTDK/

reference_url	https://access.redhat.com/errata/RHSA-2024:2693
reference_id	RHSA-2024:2693
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:2693

reference_url	https://access.redhat.com/errata/RHSA-2024:2694
reference_id	RHSA-2024:2694
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:2694

reference_url	https://access.redhat.com/errata/RHSA-2024:2778
reference_id	RHSA-2024:2778
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:2778

reference_url	https://access.redhat.com/errata/RHSA-2024:2779
reference_id	RHSA-2024:2779
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:2779

reference_url	https://access.redhat.com/errata/RHSA-2024:2780
reference_id	RHSA-2024:2780
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:2780

reference_url	https://access.redhat.com/errata/RHSA-2024:2853
reference_id	RHSA-2024:2853
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:2853

reference_url	https://access.redhat.com/errata/RHSA-2024:2910
reference_id	RHSA-2024:2910
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:2910

reference_url	https://access.redhat.com/errata/RHSA-2024:2937
reference_id	RHSA-2024:2937
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:2937

reference_url	https://access.redhat.com/errata/RHSA-2024:3501
reference_id	RHSA-2024:3501
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:3501

reference_url	https://access.redhat.com/errata/RHSA-2024:3544
reference_id	RHSA-2024:3544
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:3544

reference_url	https://access.redhat.com/errata/RHSA-2024:3665
reference_id	RHSA-2024:3665
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:3665

reference_url	https://access.redhat.com/errata/RHSA-2024:3701
reference_id	RHSA-2024:3701
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:3701

reference_url	https://access.redhat.com/errata/RHSA-2024:3763
reference_id	RHSA-2024:3763
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:3763

reference_url	https://access.redhat.com/errata/RHSA-2024:3875
reference_id	RHSA-2024:3875
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:3875

reference_url	https://access.redhat.com/errata/RHSA-2024:4252
reference_id	RHSA-2024:4252
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:4252

reference_url	https://access.redhat.com/errata/RHSA-2024:4576
reference_id	RHSA-2024:4576
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:4576

reference_url	https://access.redhat.com/errata/RHSA-2024:4721
reference_id	RHSA-2024:4721
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:4721

reference_url	https://access.redhat.com/errata/RHSA-2024:4732
reference_id	RHSA-2024:4732
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:4732

reference_url	https://access.redhat.com/errata/RHSA-2024:4824
reference_id	RHSA-2024:4824
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:4824

reference_url	https://usn.ubuntu.com/6754-1/
reference_id	USN-6754-1
reference_type
scores
url	https://usn.ubuntu.com/6754-1/

reference_url	https://usn.ubuntu.com/6754-2/
reference_id	USN-6754-2
reference_type
scores
url	https://usn.ubuntu.com/6754-2/

Weaknesses

cwe_id	390
name	Detection of Error Condition Without Action
description	The product detects a specific error, but takes no actions to handle the error.

cwe_id	770
name	Allocation of Resources Without Limits or Throttling
description	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

Exploits

Severity_range_score 5.3 - 7.5

Exploitability 0.5

Weighted_severity 4.8

Risk_score 2.4

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-94sx-qnsn-5ucm

Vulnerability Instance