Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-4pb2-tqru-uufs
Summaryinsufficient validation
Aliases
0
alias CVE-2021-35042
1
alias GHSA-xpfp-f569-q3p2
2
alias PYSEC-2021-109
Fixed_packages
0
url pkg:alpm/archlinux/python-django@3.2.5-1
purl pkg:alpm/archlinux/python-django@3.2.5-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/python-django@3.2.5-1
1
url pkg:pypi/django@3.1.13
purl pkg:pypi/django@3.1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-n9vn-4uxr-hkau
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1.13
2
url pkg:pypi/django@3.2.5
purl pkg:pypi/django@3.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-2n2n-1fq2-7bbs
2
vulnerability VCID-4z4e-8ttu-tyd6
3
vulnerability VCID-51tx-4tp9-kbcz
4
vulnerability VCID-6jpg-yrf8-cufy
5
vulnerability VCID-9end-mq19-rke5
6
vulnerability VCID-am3f-c5ex-8ff2
7
vulnerability VCID-attf-6gj8-ebaj
8
vulnerability VCID-au8h-vj9k-pufv
9
vulnerability VCID-drwp-htkk-bkfh
10
vulnerability VCID-f4a7-tcz5-byfj
11
vulnerability VCID-fksk-pr23-2yd8
12
vulnerability VCID-fsaw-3ta1-x3dw
13
vulnerability VCID-m1dr-sjmw-jfd2
14
vulnerability VCID-m33h-4p9q-63fb
15
vulnerability VCID-n9vn-4uxr-hkau
16
vulnerability VCID-nss9-1yrb-x7f2
17
vulnerability VCID-qgp1-4efd-6yg6
18
vulnerability VCID-yuda-1mur-8bbq
19
vulnerability VCID-z6tf-z1y9-cydq
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.2.5
Affected_packages
0
url pkg:alpm/archlinux/python-django@3.2.4-1
purl pkg:alpm/archlinux/python-django@3.2.4-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/python-django@3.2.4-1
1
url pkg:pypi/django@3.0a1
purl pkg:pypi/django@3.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-n9vn-4uxr-hkau
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.0a1
2
url pkg:pypi/django@3.1
purl pkg:pypi/django@3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-9mpt-zxaw-kkeg
2
vulnerability VCID-fhp8-tck4-mye4
3
vulnerability VCID-hh9b-52xn-z7a9
4
vulnerability VCID-j81e-su1y-tqa6
5
vulnerability VCID-n9vn-4uxr-hkau
6
vulnerability VCID-q8r2-m9s6-rbek
7
vulnerability VCID-qvfs-2v1h-p3h4
8
vulnerability VCID-u9q1-63gf-7feh
9
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1
3
url pkg:pypi/django@3.1.1
purl pkg:pypi/django@3.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-9mpt-zxaw-kkeg
2
vulnerability VCID-fhp8-tck4-mye4
3
vulnerability VCID-j81e-su1y-tqa6
4
vulnerability VCID-n9vn-4uxr-hkau
5
vulnerability VCID-q8r2-m9s6-rbek
6
vulnerability VCID-u9q1-63gf-7feh
7
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1.1
4
url pkg:pypi/django@3.1.2
purl pkg:pypi/django@3.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-9mpt-zxaw-kkeg
2
vulnerability VCID-fhp8-tck4-mye4
3
vulnerability VCID-j81e-su1y-tqa6
4
vulnerability VCID-n9vn-4uxr-hkau
5
vulnerability VCID-q8r2-m9s6-rbek
6
vulnerability VCID-u9q1-63gf-7feh
7
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1.2
5
url pkg:pypi/django@3.1.3
purl pkg:pypi/django@3.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-9mpt-zxaw-kkeg
2
vulnerability VCID-fhp8-tck4-mye4
3
vulnerability VCID-j81e-su1y-tqa6
4
vulnerability VCID-n9vn-4uxr-hkau
5
vulnerability VCID-q8r2-m9s6-rbek
6
vulnerability VCID-u9q1-63gf-7feh
7
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1.3
6
url pkg:pypi/django@3.1.4
purl pkg:pypi/django@3.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-9mpt-zxaw-kkeg
2
vulnerability VCID-fhp8-tck4-mye4
3
vulnerability VCID-j81e-su1y-tqa6
4
vulnerability VCID-n9vn-4uxr-hkau
5
vulnerability VCID-q8r2-m9s6-rbek
6
vulnerability VCID-u9q1-63gf-7feh
7
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1.4
7
url pkg:pypi/django@3.1.5
purl pkg:pypi/django@3.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-9mpt-zxaw-kkeg
2
vulnerability VCID-fhp8-tck4-mye4
3
vulnerability VCID-j81e-su1y-tqa6
4
vulnerability VCID-n9vn-4uxr-hkau
5
vulnerability VCID-q8r2-m9s6-rbek
6
vulnerability VCID-u9q1-63gf-7feh
7
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1.5
8
url pkg:pypi/django@3.1.6
purl pkg:pypi/django@3.1.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-9mpt-zxaw-kkeg
2
vulnerability VCID-fhp8-tck4-mye4
3
vulnerability VCID-j81e-su1y-tqa6
4
vulnerability VCID-n9vn-4uxr-hkau
5
vulnerability VCID-u9q1-63gf-7feh
6
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1.6
9
url pkg:pypi/django@3.1.7
purl pkg:pypi/django@3.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-9mpt-zxaw-kkeg
2
vulnerability VCID-fhp8-tck4-mye4
3
vulnerability VCID-j81e-su1y-tqa6
4
vulnerability VCID-n9vn-4uxr-hkau
5
vulnerability VCID-u9q1-63gf-7feh
6
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1.7
10
url pkg:pypi/django@3.1.8
purl pkg:pypi/django@3.1.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-9mpt-zxaw-kkeg
2
vulnerability VCID-j81e-su1y-tqa6
3
vulnerability VCID-n9vn-4uxr-hkau
4
vulnerability VCID-u9q1-63gf-7feh
5
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1.8
11
url pkg:pypi/django@3.1.9
purl pkg:pypi/django@3.1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-9mpt-zxaw-kkeg
2
vulnerability VCID-n9vn-4uxr-hkau
3
vulnerability VCID-u9q1-63gf-7feh
4
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1.9
12
url pkg:pypi/django@3.1.10
purl pkg:pypi/django@3.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-9mpt-zxaw-kkeg
2
vulnerability VCID-n9vn-4uxr-hkau
3
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1.10
13
url pkg:pypi/django@3.1.11
purl pkg:pypi/django@3.1.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-9mpt-zxaw-kkeg
2
vulnerability VCID-n9vn-4uxr-hkau
3
vulnerability VCID-z4x1-e7tp-rqhz
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1.11
14
url pkg:pypi/django@3.1.12
purl pkg:pypi/django@3.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-n9vn-4uxr-hkau
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.1.12
15
url pkg:pypi/django@3.2a1
purl pkg:pypi/django@3.2a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pb2-tqru-uufs
1
vulnerability VCID-4z4e-8ttu-tyd6
2
vulnerability VCID-6jpg-yrf8-cufy
3
vulnerability VCID-am3f-c5ex-8ff2
4
vulnerability VCID-au8h-vj9k-pufv
5
vulnerability VCID-f4a7-tcz5-byfj
6
vulnerability VCID-m33h-4p9q-63fb
7
vulnerability VCID-n9vn-4uxr-hkau
8
vulnerability VCID-z6tf-z1y9-cydq
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.2a1
16
url pkg:pypi/django@3.2
purl pkg:pypi/django@3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-2n2n-1fq2-7bbs
2
vulnerability VCID-4pb2-tqru-uufs
3
vulnerability VCID-4z4e-8ttu-tyd6
4
vulnerability VCID-51tx-4tp9-kbcz
5
vulnerability VCID-6jpg-yrf8-cufy
6
vulnerability VCID-9end-mq19-rke5
7
vulnerability VCID-9mpt-zxaw-kkeg
8
vulnerability VCID-am3f-c5ex-8ff2
9
vulnerability VCID-attf-6gj8-ebaj
10
vulnerability VCID-au8h-vj9k-pufv
11
vulnerability VCID-drwp-htkk-bkfh
12
vulnerability VCID-f4a7-tcz5-byfj
13
vulnerability VCID-fksk-pr23-2yd8
14
vulnerability VCID-fsaw-3ta1-x3dw
15
vulnerability VCID-j81e-su1y-tqa6
16
vulnerability VCID-m1dr-sjmw-jfd2
17
vulnerability VCID-m33h-4p9q-63fb
18
vulnerability VCID-n9vn-4uxr-hkau
19
vulnerability VCID-nss9-1yrb-x7f2
20
vulnerability VCID-qgp1-4efd-6yg6
21
vulnerability VCID-u9q1-63gf-7feh
22
vulnerability VCID-yuda-1mur-8bbq
23
vulnerability VCID-z4x1-e7tp-rqhz
24
vulnerability VCID-z6tf-z1y9-cydq
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.2
17
url pkg:pypi/django@3.2.1
purl pkg:pypi/django@3.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-2n2n-1fq2-7bbs
2
vulnerability VCID-4pb2-tqru-uufs
3
vulnerability VCID-4z4e-8ttu-tyd6
4
vulnerability VCID-51tx-4tp9-kbcz
5
vulnerability VCID-6jpg-yrf8-cufy
6
vulnerability VCID-9end-mq19-rke5
7
vulnerability VCID-9mpt-zxaw-kkeg
8
vulnerability VCID-am3f-c5ex-8ff2
9
vulnerability VCID-attf-6gj8-ebaj
10
vulnerability VCID-au8h-vj9k-pufv
11
vulnerability VCID-drwp-htkk-bkfh
12
vulnerability VCID-f4a7-tcz5-byfj
13
vulnerability VCID-fksk-pr23-2yd8
14
vulnerability VCID-fsaw-3ta1-x3dw
15
vulnerability VCID-m1dr-sjmw-jfd2
16
vulnerability VCID-m33h-4p9q-63fb
17
vulnerability VCID-n9vn-4uxr-hkau
18
vulnerability VCID-nss9-1yrb-x7f2
19
vulnerability VCID-qgp1-4efd-6yg6
20
vulnerability VCID-u9q1-63gf-7feh
21
vulnerability VCID-yuda-1mur-8bbq
22
vulnerability VCID-z4x1-e7tp-rqhz
23
vulnerability VCID-z6tf-z1y9-cydq
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.2.1
18
url pkg:pypi/django@3.2.2
purl pkg:pypi/django@3.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-2n2n-1fq2-7bbs
2
vulnerability VCID-4pb2-tqru-uufs
3
vulnerability VCID-4z4e-8ttu-tyd6
4
vulnerability VCID-51tx-4tp9-kbcz
5
vulnerability VCID-6jpg-yrf8-cufy
6
vulnerability VCID-9end-mq19-rke5
7
vulnerability VCID-9mpt-zxaw-kkeg
8
vulnerability VCID-am3f-c5ex-8ff2
9
vulnerability VCID-attf-6gj8-ebaj
10
vulnerability VCID-au8h-vj9k-pufv
11
vulnerability VCID-drwp-htkk-bkfh
12
vulnerability VCID-f4a7-tcz5-byfj
13
vulnerability VCID-fksk-pr23-2yd8
14
vulnerability VCID-fsaw-3ta1-x3dw
15
vulnerability VCID-m1dr-sjmw-jfd2
16
vulnerability VCID-m33h-4p9q-63fb
17
vulnerability VCID-n9vn-4uxr-hkau
18
vulnerability VCID-nss9-1yrb-x7f2
19
vulnerability VCID-qgp1-4efd-6yg6
20
vulnerability VCID-yuda-1mur-8bbq
21
vulnerability VCID-z4x1-e7tp-rqhz
22
vulnerability VCID-z6tf-z1y9-cydq
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.2.2
19
url pkg:pypi/django@3.2.3
purl pkg:pypi/django@3.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-2n2n-1fq2-7bbs
2
vulnerability VCID-4pb2-tqru-uufs
3
vulnerability VCID-4z4e-8ttu-tyd6
4
vulnerability VCID-51tx-4tp9-kbcz
5
vulnerability VCID-6jpg-yrf8-cufy
6
vulnerability VCID-9end-mq19-rke5
7
vulnerability VCID-9mpt-zxaw-kkeg
8
vulnerability VCID-am3f-c5ex-8ff2
9
vulnerability VCID-attf-6gj8-ebaj
10
vulnerability VCID-au8h-vj9k-pufv
11
vulnerability VCID-drwp-htkk-bkfh
12
vulnerability VCID-f4a7-tcz5-byfj
13
vulnerability VCID-fksk-pr23-2yd8
14
vulnerability VCID-fsaw-3ta1-x3dw
15
vulnerability VCID-m1dr-sjmw-jfd2
16
vulnerability VCID-m33h-4p9q-63fb
17
vulnerability VCID-n9vn-4uxr-hkau
18
vulnerability VCID-nss9-1yrb-x7f2
19
vulnerability VCID-qgp1-4efd-6yg6
20
vulnerability VCID-yuda-1mur-8bbq
21
vulnerability VCID-z4x1-e7tp-rqhz
22
vulnerability VCID-z6tf-z1y9-cydq
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.2.3
20
url pkg:pypi/django@3.2.4
purl pkg:pypi/django@3.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-2n2n-1fq2-7bbs
2
vulnerability VCID-4pb2-tqru-uufs
3
vulnerability VCID-4z4e-8ttu-tyd6
4
vulnerability VCID-51tx-4tp9-kbcz
5
vulnerability VCID-6jpg-yrf8-cufy
6
vulnerability VCID-9end-mq19-rke5
7
vulnerability VCID-am3f-c5ex-8ff2
8
vulnerability VCID-attf-6gj8-ebaj
9
vulnerability VCID-au8h-vj9k-pufv
10
vulnerability VCID-drwp-htkk-bkfh
11
vulnerability VCID-f4a7-tcz5-byfj
12
vulnerability VCID-fksk-pr23-2yd8
13
vulnerability VCID-fsaw-3ta1-x3dw
14
vulnerability VCID-m1dr-sjmw-jfd2
15
vulnerability VCID-m33h-4p9q-63fb
16
vulnerability VCID-n9vn-4uxr-hkau
17
vulnerability VCID-nss9-1yrb-x7f2
18
vulnerability VCID-qgp1-4efd-6yg6
19
vulnerability VCID-yuda-1mur-8bbq
20
vulnerability VCID-z6tf-z1y9-cydq
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@3.2.4
References
0
reference_url https://docs.djangoproject.com/en/3.2/releases/security
reference_id
reference_type
scores
url https://docs.djangoproject.com/en/3.2/releases/security
1
reference_url https://docs.djangoproject.com/en/3.2/releases/security/
reference_id
reference_type
scores
url https://docs.djangoproject.com/en/3.2/releases/security/
2
reference_url https://github.com/advisories/GHSA-xpfp-f569-q3p2
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-xpfp-f569-q3p2
3
reference_url https://github.com/django/django
reference_id
reference_type
scores
url https://github.com/django/django
4
reference_url https://github.com/django/django/commit/0bd57a879a0d54920bb9038a732645fb917040e9
reference_id
reference_type
scores
url https://github.com/django/django/commit/0bd57a879a0d54920bb9038a732645fb917040e9
5
reference_url https://github.com/django/django/commit/a34a5f724c5d5adb2109374ba3989ebb7b11f81f
reference_id
reference_type
scores
url https://github.com/django/django/commit/a34a5f724c5d5adb2109374ba3989ebb7b11f81f
6
reference_url https://github.com/django/django/commit/dae83a24519d6f284c74414e0b81d64d9b5a0db4
reference_id
reference_type
scores
url https://github.com/django/django/commit/dae83a24519d6f284c74414e0b81d64d9b5a0db4
7
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2021-109.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2021-109.yaml
8
reference_url https://groups.google.com/forum/#!forum/django-announce
reference_id
reference_type
scores
url https://groups.google.com/forum/#!forum/django-announce
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SS6NJTBYWOX6J7G4U3LUOILARJKWPQ5Y
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SS6NJTBYWOX6J7G4U3LUOILARJKWPQ5Y
10
reference_url https://security.netapp.com/advisory/ntap-20210805-0008
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20210805-0008
11
reference_url https://www.djangoproject.com/weblog/2021/jul/01/security-releases
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2021/jul/01/security-releases
12
reference_url https://www.djangoproject.com/weblog/2021/jul/01/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2021/jul/01/security-releases/
13
reference_url https://www.openwall.com/lists/oss-security/2021/07/02/2
reference_id
reference_type
scores
url https://www.openwall.com/lists/oss-security/2021/07/02/2
14
reference_url https://security.archlinux.org/ASA-202107-11
reference_id ASA-202107-11
reference_type
scores
url https://security.archlinux.org/ASA-202107-11
15
reference_url https://security.archlinux.org/AVG-2123
reference_id AVG-2123
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2123
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-35042
reference_id CVE-2021-35042
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-35042
Weaknesses
0
cwe_id 89
name Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
description The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score7.0 - 8.9
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-4pb2-tqru-uufs