Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-zvkn-n581-xqf3

Summary HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.

Aliases

alias	CVE-2016-9243

alias	GHSA-q3cj-2r34-2cwc

alias	PYSEC-2017-8

Fixed_packages

url	pkg:deb/debian/python-cryptography@1.5.3-1?distro=trixie
purl	pkg:deb/debian/python-cryptography@1.5.3-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@1.5.3-1%3Fdistro=trixie

url pkg:deb/debian/python-cryptography@1.7.1-3~bpo8%2B1

purl pkg:deb/debian/python-cryptography@1.7.1-3~bpo8%2B1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-48jq-1u5d-tkan

vulnerability	VCID-4nw9-zhuy-y7cz

vulnerability	VCID-bjpd-6kh8-1bbs

vulnerability	VCID-u4f5-k68d-wfd1

vulnerability	VCID-vmx8-tjg2-uuec

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@1.7.1-3~bpo8%252B1

url pkg:deb/debian/python-cryptography@3.3.2-1?distro=trixie

purl pkg:deb/debian/python-cryptography@3.3.2-1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-rgsr-9wpx-qqg6

vulnerability	VCID-x7vf-dyab-qbhq

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@3.3.2-1%3Fdistro=trixie

url pkg:deb/debian/python-cryptography@38.0.4-3%2Bdeb12u1?distro=trixie

purl pkg:deb/debian/python-cryptography@38.0.4-3%2Bdeb12u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-rgsr-9wpx-qqg6

vulnerability	VCID-x7vf-dyab-qbhq

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@38.0.4-3%252Bdeb12u1%3Fdistro=trixie

url pkg:deb/debian/python-cryptography@43.0.0-3%2Bdeb13u1?distro=trixie

purl pkg:deb/debian/python-cryptography@43.0.0-3%2Bdeb13u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-rgsr-9wpx-qqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@43.0.0-3%252Bdeb13u1%3Fdistro=trixie

url pkg:deb/debian/python-cryptography@46.0.5-2?distro=trixie

purl pkg:deb/debian/python-cryptography@46.0.5-2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-rgsr-9wpx-qqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@46.0.5-2%3Fdistro=trixie

url pkg:deb/debian/python-cryptography@46.0.6-1?distro=trixie

purl pkg:deb/debian/python-cryptography@46.0.6-1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-za3q-wwzc-qbgv

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@46.0.6-1%3Fdistro=trixie

url	pkg:deb/debian/python-cryptography@46.0.7-1?distro=trixie
purl	pkg:deb/debian/python-cryptography@46.0.7-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@46.0.7-1%3Fdistro=trixie

url pkg:pypi/cryptography@1.5.3

purl pkg:pypi/cryptography@1.5.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.5.3

Affected_packages

url pkg:deb/debian/python-cryptography@0.6.1-1

purl pkg:deb/debian/python-cryptography@0.6.1-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-48jq-1u5d-tkan

vulnerability	VCID-4nw9-zhuy-y7cz

vulnerability	VCID-bjpd-6kh8-1bbs

vulnerability	VCID-u4f5-k68d-wfd1

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@0.6.1-1

url pkg:deb/debian/python-cryptography@0.6.1-1%2Bdeb8u1

purl pkg:deb/debian/python-cryptography@0.6.1-1%2Bdeb8u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-48jq-1u5d-tkan

vulnerability	VCID-4nw9-zhuy-y7cz

vulnerability	VCID-bjpd-6kh8-1bbs

vulnerability	VCID-u4f5-k68d-wfd1

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@0.6.1-1%252Bdeb8u1

url pkg:deb/debian/python-cryptography@0.8.2-2~bpo8%2B1

purl pkg:deb/debian/python-cryptography@0.8.2-2~bpo8%2B1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-48jq-1u5d-tkan

vulnerability	VCID-4nw9-zhuy-y7cz

vulnerability	VCID-bjpd-6kh8-1bbs

vulnerability	VCID-u4f5-k68d-wfd1

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@0.8.2-2~bpo8%252B1

url pkg:pypi/cryptography@0.1

purl pkg:pypi/cryptography@0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.1

url pkg:pypi/cryptography@0.2

purl pkg:pypi/cryptography@0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.2

url pkg:pypi/cryptography@0.2.1

purl pkg:pypi/cryptography@0.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.2.1

url pkg:pypi/cryptography@0.2.2

purl pkg:pypi/cryptography@0.2.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.2.2

url pkg:pypi/cryptography@0.3

purl pkg:pypi/cryptography@0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.3

url pkg:pypi/cryptography@0.4

purl pkg:pypi/cryptography@0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.4

url pkg:pypi/cryptography@0.5

purl pkg:pypi/cryptography@0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.5

url pkg:pypi/cryptography@0.5.1

purl pkg:pypi/cryptography@0.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.5.1

url pkg:pypi/cryptography@0.5.2

purl pkg:pypi/cryptography@0.5.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.5.2

url pkg:pypi/cryptography@0.5.3

purl pkg:pypi/cryptography@0.5.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.5.3

url pkg:pypi/cryptography@0.5.4

purl pkg:pypi/cryptography@0.5.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.5.4

url pkg:pypi/cryptography@0.6

purl pkg:pypi/cryptography@0.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.6

url pkg:pypi/cryptography@0.6.1

purl pkg:pypi/cryptography@0.6.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.6.1

url pkg:pypi/cryptography@0.7

purl pkg:pypi/cryptography@0.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.7

url pkg:pypi/cryptography@0.7.1

purl pkg:pypi/cryptography@0.7.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.7.1

url pkg:pypi/cryptography@0.7.2

purl pkg:pypi/cryptography@0.7.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.7.2

url pkg:pypi/cryptography@0.8

purl pkg:pypi/cryptography@0.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.8

url pkg:pypi/cryptography@0.8.1

purl pkg:pypi/cryptography@0.8.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.8.1

url pkg:pypi/cryptography@0.8.2

purl pkg:pypi/cryptography@0.8.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.8.2

url pkg:pypi/cryptography@0.9

purl pkg:pypi/cryptography@0.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.9

url pkg:pypi/cryptography@0.9.1

purl pkg:pypi/cryptography@0.9.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.9.1

url pkg:pypi/cryptography@0.9.2

purl pkg:pypi/cryptography@0.9.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.9.2

url pkg:pypi/cryptography@0.9.3

purl pkg:pypi/cryptography@0.9.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@0.9.3

url pkg:pypi/cryptography@1.0

purl pkg:pypi/cryptography@1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.0

url pkg:pypi/cryptography@1.0.1

purl pkg:pypi/cryptography@1.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.0.1

url pkg:pypi/cryptography@1.0.2

purl pkg:pypi/cryptography@1.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.0.2

url pkg:pypi/cryptography@1.1

purl pkg:pypi/cryptography@1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.1

url pkg:pypi/cryptography@1.1.1

purl pkg:pypi/cryptography@1.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.1.1

url pkg:pypi/cryptography@1.1.2

purl pkg:pypi/cryptography@1.1.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.1.2

url pkg:pypi/cryptography@1.2

purl pkg:pypi/cryptography@1.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.2

url pkg:pypi/cryptography@1.2.1

purl pkg:pypi/cryptography@1.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.2.1

url pkg:pypi/cryptography@1.2.2

purl pkg:pypi/cryptography@1.2.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.2.2

url pkg:pypi/cryptography@1.2.3

purl pkg:pypi/cryptography@1.2.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.2.3

url pkg:pypi/cryptography@1.3

purl pkg:pypi/cryptography@1.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.3

url pkg:pypi/cryptography@1.3.1

purl pkg:pypi/cryptography@1.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.3.1

url pkg:pypi/cryptography@1.3.2

purl pkg:pypi/cryptography@1.3.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.3.2

url pkg:pypi/cryptography@1.3.3

purl pkg:pypi/cryptography@1.3.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.3.3

url pkg:pypi/cryptography@1.3.4

purl pkg:pypi/cryptography@1.3.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.3.4

url pkg:pypi/cryptography@1.4

purl pkg:pypi/cryptography@1.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.4

url pkg:pypi/cryptography@1.5

purl pkg:pypi/cryptography@1.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.5

url pkg:pypi/cryptography@1.5.1

purl pkg:pypi/cryptography@1.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.5.1

url pkg:pypi/cryptography@1.5.2

purl pkg:pypi/cryptography@1.5.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4j5v-k162-tfgd

vulnerability	VCID-f44c-ygbw-bufn

vulnerability	VCID-hpev-apm4-sqfw

vulnerability	VCID-npaa-km8e-f3gs

vulnerability	VCID-vmx8-tjg2-uuec

vulnerability	VCID-x2wm-3tk7-wbbv

vulnerability	VCID-x7vf-dyab-qbhq

vulnerability	VCID-zvkn-n581-xqf3

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.5.2

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9243.json

reference_id

reference_type

scores

value	4.8
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9243.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2016-9243

reference_id

reference_type

scores

value	0.0165
scoring_system	epss
scoring_elements	0.82008
published_at	2026-04-13T12:55:00Z

value	0.0165
scoring_system	epss
scoring_elements	0.82014
published_at	2026-04-12T12:55:00Z

value	0.0165
scoring_system	epss
scoring_elements	0.82025
published_at	2026-04-11T12:55:00Z

value	0.0165
scoring_system	epss
scoring_elements	0.82006
published_at	2026-04-09T12:55:00Z

value	0.0165
scoring_system	epss
scoring_elements	0.81998
published_at	2026-04-08T12:55:00Z

value	0.0165
scoring_system	epss
scoring_elements	0.81971
published_at	2026-04-07T12:55:00Z

value	0.0165
scoring_system	epss
scoring_elements	0.81975
published_at	2026-04-04T12:55:00Z

value	0.0165
scoring_system	epss
scoring_elements	0.8194
published_at	2026-04-01T12:55:00Z

value	0.0165
scoring_system	epss
scoring_elements	0.81951
published_at	2026-04-02T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2016-9243

reference_url

https://cryptography.io/en/latest/changelog

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://cryptography.io/en/latest/changelog

reference_url

https://cryptography.io/en/latest/changelog/#v1-5-3

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://cryptography.io/en/latest/changelog/#v1-5-3

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9243
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9243

reference_url

https://github.com/advisories/GHSA-q3cj-2r34-2cwc

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	HIGH
scoring_system	cvssv3.1_qr
scoring_elements

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/advisories/GHSA-q3cj-2r34-2cwc

reference_url

https://github.com/pyca/cryptography

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/pyca/cryptography

reference_url

https://github.com/pyca/cryptography/commit/b924696b2e8731f39696584d12cceeb3aeb2d874

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/pyca/cryptography/commit/b924696b2e8731f39696584d12cceeb3aeb2d874

reference_url

https://github.com/pyca/cryptography/issues/3211

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/pyca/cryptography/issues/3211

reference_url

https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2017-8.yaml

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2017-8.yaml

reference_url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R2ZOBMPWDFFHUZ6QOZZY36A6H5CGJXL

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R2ZOBMPWDFFHUZ6QOZZY36A6H5CGJXL

reference_url	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R2ZOBMPWDFFHUZ6QOZZY36A6H5CGJXL/
reference_id
reference_type
scores
url	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R2ZOBMPWDFFHUZ6QOZZY36A6H5CGJXL/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U23KDR2M2N7W2ZSREG63BVW7D4VC6CIZ

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U23KDR2M2N7W2ZSREG63BVW7D4VC6CIZ

reference_url	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U23KDR2M2N7W2ZSREG63BVW7D4VC6CIZ/
reference_id
reference_type
scores
url	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U23KDR2M2N7W2ZSREG63BVW7D4VC6CIZ/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQ5G7KHKZC4SI23JE7277KZXM57GEQKT

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQ5G7KHKZC4SI23JE7277KZXM57GEQKT

reference_url	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQ5G7KHKZC4SI23JE7277KZXM57GEQKT/
reference_id
reference_type
scores
url	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQ5G7KHKZC4SI23JE7277KZXM57GEQKT/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R2ZOBMPWDFFHUZ6QOZZY36A6H5CGJXL

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R2ZOBMPWDFFHUZ6QOZZY36A6H5CGJXL

reference_url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R2ZOBMPWDFFHUZ6QOZZY36A6H5CGJXL/
reference_id
reference_type
scores
url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R2ZOBMPWDFFHUZ6QOZZY36A6H5CGJXL/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U23KDR2M2N7W2ZSREG63BVW7D4VC6CIZ

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U23KDR2M2N7W2ZSREG63BVW7D4VC6CIZ

reference_url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U23KDR2M2N7W2ZSREG63BVW7D4VC6CIZ/
reference_id
reference_type
scores
url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U23KDR2M2N7W2ZSREG63BVW7D4VC6CIZ/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQ5G7KHKZC4SI23JE7277KZXM57GEQKT

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQ5G7KHKZC4SI23JE7277KZXM57GEQKT

reference_url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQ5G7KHKZC4SI23JE7277KZXM57GEQKT/
reference_id
reference_type
scores
url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQ5G7KHKZC4SI23JE7277KZXM57GEQKT/

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2016-9243

reference_id

reference_type

scores

value	5.0
scoring_system	cvssv2
scoring_elements	AV:N/AC:L/Au:N/C:N/I:P/A:N

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2016-9243

reference_url

http://www.openwall.com/lists/oss-security/2016/11/09/2

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

http://www.openwall.com/lists/oss-security/2016/11/09/2

reference_url

http://www.securityfocus.com/bid/94216

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

http://www.securityfocus.com/bid/94216

reference_url

http://www.ubuntu.com/usn/USN-3138-1

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

http://www.ubuntu.com/usn/USN-3138-1

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1393431
reference_id	1393431
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1393431

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cryptography.io:cryptography::::::python::*
reference_id	cpe:2.3:a:cryptography.io:cryptography::::::python::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cryptography.io:cryptography::::::python::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::
reference_id	cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.10:::::::*
reference_id	cpe:2.3:o:canonical:ubuntu_linux:16.10:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.10:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:23:::::::*
reference_id	cpe:2.3:o:fedoraproject:fedora:23:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:23:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:24:::::::*
reference_id	cpe:2.3:o:fedoraproject:fedora:24:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:24:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:25:::::::*
reference_id	cpe:2.3:o:fedoraproject:fedora:25:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:25:::::::*

reference_url	https://usn.ubuntu.com/3138-1/
reference_id	USN-3138-1
reference_type
scores
url	https://usn.ubuntu.com/3138-1/

Weaknesses

cwe_id	20
name	Improper Input Validation
description	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

cwe_id	327
name	Use of a Broken or Risky Cryptographic Algorithm
description	The product uses a broken or risky cryptographic algorithm or protocol.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

Exploits

Severity_range_score 4.8 - 8.9

Exploitability 0.5

Weighted_severity 8.0

Risk_score 4.0

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zvkn-n581-xqf3

Vulnerability Instance