Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-864e-hkby-qfh6
Summary
Arbitrary Code Execution in underscore
The package `underscore` from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Execution via the template function, particularly when a variable property is passed as an argument as it is not sanitized.
Aliases
0
alias CVE-2021-23358
1
alias GHSA-cf4h-3jhx-xvhq
Fixed_packages
0
url pkg:deb/debian/underscore@1.9.1~dfsg-1%2Bdeb10u1
purl pkg:deb/debian/underscore@1.9.1~dfsg-1%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/underscore@1.9.1~dfsg-1%252Bdeb10u1
1
url pkg:deb/debian/underscore@1.9.1~dfsg-2?distro=trixie
purl pkg:deb/debian/underscore@1.9.1~dfsg-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/underscore@1.9.1~dfsg-2%3Fdistro=trixie
2
url pkg:deb/debian/underscore@1.9.1~dfsg-3?distro=trixie
purl pkg:deb/debian/underscore@1.9.1~dfsg-3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/underscore@1.9.1~dfsg-3%3Fdistro=trixie
3
url pkg:deb/debian/underscore@1.9.1~dfsg-3
purl pkg:deb/debian/underscore@1.9.1~dfsg-3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/underscore@1.9.1~dfsg-3
4
url pkg:deb/debian/underscore@1.13.4~dfsg%2B~1.11.4-3?distro=trixie
purl pkg:deb/debian/underscore@1.13.4~dfsg%2B~1.11.4-3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/underscore@1.13.4~dfsg%252B~1.11.4-3%3Fdistro=trixie
5
url pkg:deb/debian/underscore@1.13.8~dfsg%2B~1.13.0-1?distro=trixie
purl pkg:deb/debian/underscore@1.13.8~dfsg%2B~1.13.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/underscore@1.13.8~dfsg%252B~1.13.0-1%3Fdistro=trixie
6
url pkg:npm/underscore@1.12.1
purl pkg:npm/underscore@1.12.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.12.1
Affected_packages
0
url pkg:deb/debian/underscore@1.1.6-1%2Bdeb7u1
purl pkg:deb/debian/underscore@1.1.6-1%2Bdeb7u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/underscore@1.1.6-1%252Bdeb7u1
1
url pkg:deb/debian/underscore@1.7.0~dfsg-1
purl pkg:deb/debian/underscore@1.7.0~dfsg-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/underscore@1.7.0~dfsg-1
2
url pkg:deb/debian/underscore@1.8.3~dfsg-1~bpo8%2B1
purl pkg:deb/debian/underscore@1.8.3~dfsg-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/underscore@1.8.3~dfsg-1~bpo8%252B1
3
url pkg:deb/debian/underscore@1.8.3~dfsg-1
purl pkg:deb/debian/underscore@1.8.3~dfsg-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/underscore@1.8.3~dfsg-1
4
url pkg:deb/debian/underscore@1.9.1~dfsg-1
purl pkg:deb/debian/underscore@1.9.1~dfsg-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/underscore@1.9.1~dfsg-1
5
url pkg:deb/debian/underscore@1.9.1~dfsg-1%2Bdeb10u1
purl pkg:deb/debian/underscore@1.9.1~dfsg-1%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/underscore@1.9.1~dfsg-1%252Bdeb10u1
6
url pkg:npm/underscore@1.3.2
purl pkg:npm/underscore@1.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.3.2
7
url pkg:npm/underscore@1.3.3
purl pkg:npm/underscore@1.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.3.3
8
url pkg:npm/underscore@1.4.0
purl pkg:npm/underscore@1.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.4.0
9
url pkg:npm/underscore@1.4.1
purl pkg:npm/underscore@1.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.4.1
10
url pkg:npm/underscore@1.4.2
purl pkg:npm/underscore@1.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.4.2
11
url pkg:npm/underscore@1.4.3
purl pkg:npm/underscore@1.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.4.3
12
url pkg:npm/underscore@1.4.4
purl pkg:npm/underscore@1.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.4.4
13
url pkg:npm/underscore@1.5.0
purl pkg:npm/underscore@1.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.5.0
14
url pkg:npm/underscore@1.5.1
purl pkg:npm/underscore@1.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.5.1
15
url pkg:npm/underscore@1.5.2
purl pkg:npm/underscore@1.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.5.2
16
url pkg:npm/underscore@1.6.0
purl pkg:npm/underscore@1.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.6.0
17
url pkg:npm/underscore@1.7.0
purl pkg:npm/underscore@1.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.7.0
18
url pkg:npm/underscore@1.8.0
purl pkg:npm/underscore@1.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.8.0
19
url pkg:npm/underscore@1.8.1
purl pkg:npm/underscore@1.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.8.1
20
url pkg:npm/underscore@1.8.2
purl pkg:npm/underscore@1.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.8.2
21
url pkg:npm/underscore@1.8.3
purl pkg:npm/underscore@1.8.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.8.3
22
url pkg:npm/underscore@1.9.0
purl pkg:npm/underscore@1.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.9.0
23
url pkg:npm/underscore@1.9.1
purl pkg:npm/underscore@1.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.9.1
24
url pkg:npm/underscore@1.9.2
purl pkg:npm/underscore@1.9.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.9.2
25
url pkg:npm/underscore@1.10.0
purl pkg:npm/underscore@1.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.10.0
26
url pkg:npm/underscore@1.10.1
purl pkg:npm/underscore@1.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.10.1
27
url pkg:npm/underscore@1.10.2
purl pkg:npm/underscore@1.10.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.10.2
28
url pkg:npm/underscore@1.11.0
purl pkg:npm/underscore@1.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.11.0
29
url pkg:npm/underscore@1.12.0
purl pkg:npm/underscore@1.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
1
vulnerability VCID-w2jr-m4eg-27fk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/underscore@1.12.0
30
url pkg:rpm/redhat/ceph@2:18.2.1-381?arch=el8cp
purl pkg:rpm/redhat/ceph@2:18.2.1-381?arch=el8cp
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1yz5-m9s7-nqdm
2
vulnerability VCID-864e-hkby-qfh6
3
vulnerability VCID-h8nr-tcb7-93em
4
vulnerability VCID-hay4-q9m3-ekdj
5
vulnerability VCID-qb4z-jzem-myee
6
vulnerability VCID-qp47-aewx-wufh
7
vulnerability VCID-r1ah-c6z7-vyen
8
vulnerability VCID-s6f3-3mxh-ekfr
9
vulnerability VCID-sty6-gwh1-hbcy
10
vulnerability VCID-vzq7-t235-ukd5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ceph@2:18.2.1-381%3Farch=el8cp
31
url pkg:rpm/redhat/ovirt-engine-ui-extensions@1.2.7-1?arch=el8ev
purl pkg:rpm/redhat/ovirt-engine-ui-extensions@1.2.7-1?arch=el8ev
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4f1w-xpyy-2fcf
1
vulnerability VCID-864e-hkby-qfh6
2
vulnerability VCID-q32y-yvrx-wkby
3
vulnerability VCID-tsp3-tyjt-h7bk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ovirt-engine-ui-extensions@1.2.7-1%3Farch=el8ev
32
url pkg:rpm/redhat/ovirt-web-ui@1.9.1-1?arch=el8ev
purl pkg:rpm/redhat/ovirt-web-ui@1.9.1-1?arch=el8ev
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-864e-hkby-qfh6
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ovirt-web-ui@1.9.1-1%3Farch=el8ev
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-23358.json
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-23358.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-23358
reference_id
reference_type
scores
0
value 0.01078
scoring_system epss
scoring_elements 0.77848
published_at 2026-04-21T12:55:00Z
1
value 0.01078
scoring_system epss
scoring_elements 0.77853
published_at 2026-04-18T12:55:00Z
2
value 0.01078
scoring_system epss
scoring_elements 0.77855
published_at 2026-04-16T12:55:00Z
3
value 0.01078
scoring_system epss
scoring_elements 0.77767
published_at 2026-04-02T12:55:00Z
4
value 0.01078
scoring_system epss
scoring_elements 0.7776
published_at 2026-04-01T12:55:00Z
5
value 0.01078
scoring_system epss
scoring_elements 0.77793
published_at 2026-04-04T12:55:00Z
6
value 0.01078
scoring_system epss
scoring_elements 0.77818
published_at 2026-04-13T12:55:00Z
7
value 0.01078
scoring_system epss
scoring_elements 0.77819
published_at 2026-04-12T12:55:00Z
8
value 0.01078
scoring_system epss
scoring_elements 0.77835
published_at 2026-04-11T12:55:00Z
9
value 0.01078
scoring_system epss
scoring_elements 0.77809
published_at 2026-04-09T12:55:00Z
10
value 0.01078
scoring_system epss
scoring_elements 0.77777
published_at 2026-04-07T12:55:00Z
11
value 0.01078
scoring_system epss
scoring_elements 0.77804
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-23358
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23358
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23358
3
reference_url http://seclists.org/fulldisclosure/2025/Apr/14
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2025/Apr/14
4
reference_url https://github.com/jashkenas/underscore
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/jashkenas/underscore
5
reference_url https://github.com/jashkenas/underscore/blob/master/modules/template.js%23L71
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://github.com/jashkenas/underscore/blob/master/modules/template.js%23L71
6
reference_url https://github.com/jashkenas/underscore/commit/4c73526d43838ad6ab43a6134728776632adeb66
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/jashkenas/underscore/commit/4c73526d43838ad6ab43a6134728776632adeb66
7
reference_url https://github.com/jashkenas/underscore/pull/2917
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/jashkenas/underscore/pull/2917
8
reference_url https://github.com/jashkenas/underscore/releases/tag/1.12.1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/jashkenas/underscore/releases/tag/1.12.1
9
reference_url https://lists.apache.org/thread.html/r5df90c46f7000c4aab246e947f62361ecfb849c5a553dcdb0ef545e1@%3Cissues.cordova.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r5df90c46f7000c4aab246e947f62361ecfb849c5a553dcdb0ef545e1@%3Cissues.cordova.apache.org%3E
10
reference_url https://lists.apache.org/thread.html/r5df90c46f7000c4aab246e947f62361ecfb849c5a553dcdb0ef545e1%40%3Cissues.cordova.apache.org%3E
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://lists.apache.org/thread.html/r5df90c46f7000c4aab246e947f62361ecfb849c5a553dcdb0ef545e1%40%3Cissues.cordova.apache.org%3E
11
reference_url https://lists.apache.org/thread.html/r770f910653772317b117ab4472b0a32c266ee4abbafda28b8a6f9306@%3Cissues.cordova.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r770f910653772317b117ab4472b0a32c266ee4abbafda28b8a6f9306@%3Cissues.cordova.apache.org%3E
12
reference_url https://lists.apache.org/thread.html/r770f910653772317b117ab4472b0a32c266ee4abbafda28b8a6f9306%40%3Cissues.cordova.apache.org%3E
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://lists.apache.org/thread.html/r770f910653772317b117ab4472b0a32c266ee4abbafda28b8a6f9306%40%3Cissues.cordova.apache.org%3E
13
reference_url https://lists.apache.org/thread.html/raae088abdfa4fbd84e1d19d7a7ffe52bf8e426b83e6599ea9a734dba@%3Cissues.cordova.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/raae088abdfa4fbd84e1d19d7a7ffe52bf8e426b83e6599ea9a734dba@%3Cissues.cordova.apache.org%3E
14
reference_url https://lists.apache.org/thread.html/raae088abdfa4fbd84e1d19d7a7ffe52bf8e426b83e6599ea9a734dba%40%3Cissues.cordova.apache.org%3E
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://lists.apache.org/thread.html/raae088abdfa4fbd84e1d19d7a7ffe52bf8e426b83e6599ea9a734dba%40%3Cissues.cordova.apache.org%3E
15
reference_url https://lists.apache.org/thread.html/rbc84926bacd377503a3f5c37b923c1931f9d343754488d94e6f08039@%3Cissues.cordova.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rbc84926bacd377503a3f5c37b923c1931f9d343754488d94e6f08039@%3Cissues.cordova.apache.org%3E
16
reference_url https://lists.apache.org/thread.html/rbc84926bacd377503a3f5c37b923c1931f9d343754488d94e6f08039%40%3Cissues.cordova.apache.org%3E
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://lists.apache.org/thread.html/rbc84926bacd377503a3f5c37b923c1931f9d343754488d94e6f08039%40%3Cissues.cordova.apache.org%3E
17
reference_url https://lists.apache.org/thread.html/re69ee408b3983b43e9c4a82a9a17cbbf8681bb91a4b61b46f365aeaf@%3Cissues.cordova.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/re69ee408b3983b43e9c4a82a9a17cbbf8681bb91a4b61b46f365aeaf@%3Cissues.cordova.apache.org%3E
18
reference_url https://lists.apache.org/thread.html/re69ee408b3983b43e9c4a82a9a17cbbf8681bb91a4b61b46f365aeaf%40%3Cissues.cordova.apache.org%3E
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://lists.apache.org/thread.html/re69ee408b3983b43e9c4a82a9a17cbbf8681bb91a4b61b46f365aeaf%40%3Cissues.cordova.apache.org%3E
19
reference_url https://lists.debian.org/debian-lts-announce/2021/03/msg00038.html
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://lists.debian.org/debian-lts-announce/2021/03/msg00038.html
20
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKATXXETD2PF3OR36Q5PD2VSVAR6J5Z
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKATXXETD2PF3OR36Q5PD2VSVAR6J5Z
21
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGEE7U4Z655A2MK5EW4UQQZ7B64XJWBV
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGEE7U4Z655A2MK5EW4UQQZ7B64XJWBV
22
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EOKATXXETD2PF3OR36Q5PD2VSVAR6J5Z
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EOKATXXETD2PF3OR36Q5PD2VSVAR6J5Z
23
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FGEE7U4Z655A2MK5EW4UQQZ7B64XJWBV
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FGEE7U4Z655A2MK5EW4UQQZ7B64XJWBV
24
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-23358
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-23358
25
reference_url https://security.netapp.com/advisory/ntap-20240808-0003
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20240808-0003
26
reference_url https://security.netapp.com/advisory/ntap-20241108-0002
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20241108-0002
27
reference_url https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1081504
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1081504
28
reference_url https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBJASHKENAS-1081505
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBJASHKENAS-1081505
29
reference_url https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1081503
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1081503
30
reference_url https://snyk.io/vuln/SNYK-JS-UNDERSCORE-1080984
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://snyk.io/vuln/SNYK-JS-UNDERSCORE-1080984
31
reference_url https://www.debian.org/security/2021/dsa-4883
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://www.debian.org/security/2021/dsa-4883
32
reference_url https://www.npmjs.com/package/underscore
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.npmjs.com/package/underscore
33
reference_url https://www.tenable.com/security/tns-2021-14
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://www.tenable.com/security/tns-2021-14
34
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1944286
reference_id 1944286
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1944286
35
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986171
reference_id 986171
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986171
36
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKATXXETD2PF3OR36Q5PD2VSVAR6J5Z/
reference_id EOKATXXETD2PF3OR36Q5PD2VSVAR6J5Z
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKATXXETD2PF3OR36Q5PD2VSVAR6J5Z/
37
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGEE7U4Z655A2MK5EW4UQQZ7B64XJWBV/
reference_id FGEE7U4Z655A2MK5EW4UQQZ7B64XJWBV
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T15:48:41Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGEE7U4Z655A2MK5EW4UQQZ7B64XJWBV/
38
reference_url https://github.com/advisories/GHSA-cf4h-3jhx-xvhq
reference_id GHSA-cf4h-3jhx-xvhq
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cf4h-3jhx-xvhq
39
reference_url https://access.redhat.com/errata/RHSA-2021:1448
reference_id RHSA-2021:1448
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1448
40
reference_url https://access.redhat.com/errata/RHSA-2021:2865
reference_id RHSA-2021:2865
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2865
41
reference_url https://access.redhat.com/errata/RHSA-2022:6393
reference_id RHSA-2022:6393
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6393
42
reference_url https://access.redhat.com/errata/RHSA-2026:2737
reference_id RHSA-2026:2737
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:2737
43
reference_url https://access.redhat.com/errata/RHSA-2026:3406
reference_id RHSA-2026:3406
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:3406
44
reference_url https://usn.ubuntu.com/4913-1/
reference_id USN-4913-1
reference_type
scores
url https://usn.ubuntu.com/4913-1/
45
reference_url https://usn.ubuntu.com/4913-2/
reference_id USN-4913-2
reference_type
scores
url https://usn.ubuntu.com/4913-2/
Weaknesses
0
cwe_id 94
name Improper Control of Generation of Code ('Code Injection')
description The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score3.3 - 10.0
Exploitability0.5
Weighted_severity9.0
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-864e-hkby-qfh6