Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-wegc-1zcu-qygw

Summary Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117.

Aliases

alias	CVE-2017-16228

alias	GHSA-cwwh-4382-6fwr

alias	PYSEC-2017-12

Fixed_packages

url	pkg:deb/debian/dulwich@0.18.5-1?distro=trixie
purl	pkg:deb/debian/dulwich@0.18.5-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/dulwich@0.18.5-1%3Fdistro=trixie

url	pkg:deb/debian/dulwich@0.19.11-2
purl	pkg:deb/debian/dulwich@0.19.11-2
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/dulwich@0.19.11-2

url	pkg:deb/debian/dulwich@0.20.15-1?distro=trixie
purl	pkg:deb/debian/dulwich@0.20.15-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/dulwich@0.20.15-1%3Fdistro=trixie

url	pkg:deb/debian/dulwich@0.21.2-1?distro=trixie
purl	pkg:deb/debian/dulwich@0.21.2-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/dulwich@0.21.2-1%3Fdistro=trixie

url	pkg:deb/debian/dulwich@0.22.7-1?distro=trixie
purl	pkg:deb/debian/dulwich@0.22.7-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/dulwich@0.22.7-1%3Fdistro=trixie

url	pkg:deb/debian/dulwich@1.1.0-3?distro=trixie
purl	pkg:deb/debian/dulwich@1.1.0-3?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/dulwich@1.1.0-3%3Fdistro=trixie

url	pkg:pypi/dulwich@0.18.5
purl	pkg:pypi/dulwich@0.18.5
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.18.5

Affected_packages

url pkg:deb/debian/dulwich@0.6.1-1

purl pkg:deb/debian/dulwich@0.6.1-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-j1c4-rux6-wygr

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dulwich@0.6.1-1

url pkg:deb/debian/dulwich@0.6.1-1%2Bdeb6u1

purl pkg:deb/debian/dulwich@0.6.1-1%2Bdeb6u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-j1c4-rux6-wygr

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dulwich@0.6.1-1%252Bdeb6u1

url pkg:deb/debian/dulwich@0.8.5-2%2Bdeb7u2

purl pkg:deb/debian/dulwich@0.8.5-2%2Bdeb7u2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-j1c4-rux6-wygr

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dulwich@0.8.5-2%252Bdeb7u2

url pkg:deb/debian/dulwich@0.9.7-3

purl pkg:deb/debian/dulwich@0.9.7-3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-j1c4-rux6-wygr

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dulwich@0.9.7-3

url pkg:deb/debian/dulwich@0.16.3-1

purl pkg:deb/debian/dulwich@0.16.3-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dulwich@0.16.3-1

url pkg:pypi/dulwich@0.0.1

purl pkg:pypi/dulwich@0.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.0.1

url pkg:pypi/dulwich@0.1.0

purl pkg:pypi/dulwich@0.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.1.0

url pkg:pypi/dulwich@0.1.1

purl pkg:pypi/dulwich@0.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.1.1

url pkg:pypi/dulwich@0.2.1

purl pkg:pypi/dulwich@0.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.2.1

url pkg:pypi/dulwich@0.3.0

purl pkg:pypi/dulwich@0.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.3.0

url pkg:pypi/dulwich@0.3.1

purl pkg:pypi/dulwich@0.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.3.1

url pkg:pypi/dulwich@0.3.2

purl pkg:pypi/dulwich@0.3.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.3.2

url pkg:pypi/dulwich@0.3.3

purl pkg:pypi/dulwich@0.3.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.3.3

url pkg:pypi/dulwich@0.4.0

purl pkg:pypi/dulwich@0.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.4.0

url pkg:pypi/dulwich@0.4.1

purl pkg:pypi/dulwich@0.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.4.1

url pkg:pypi/dulwich@0.5.0

purl pkg:pypi/dulwich@0.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.5.0

url pkg:pypi/dulwich@0.6.0

purl pkg:pypi/dulwich@0.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.6.0

url pkg:pypi/dulwich@0.6.1

purl pkg:pypi/dulwich@0.6.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.6.1

url pkg:pypi/dulwich@0.6.2

purl pkg:pypi/dulwich@0.6.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.6.2

url pkg:pypi/dulwich@0.7.0

purl pkg:pypi/dulwich@0.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.7.0

url pkg:pypi/dulwich@0.7.1

purl pkg:pypi/dulwich@0.7.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.7.1

url pkg:pypi/dulwich@0.8.0

purl pkg:pypi/dulwich@0.8.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.8.0

url pkg:pypi/dulwich@0.8.1

purl pkg:pypi/dulwich@0.8.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.8.1

url pkg:pypi/dulwich@0.8.2

purl pkg:pypi/dulwich@0.8.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.8.2

url pkg:pypi/dulwich@0.8.3

purl pkg:pypi/dulwich@0.8.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.8.3

url pkg:pypi/dulwich@0.8.4

purl pkg:pypi/dulwich@0.8.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.8.4

url pkg:pypi/dulwich@0.8.5

purl pkg:pypi/dulwich@0.8.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.8.5

url pkg:pypi/dulwich@0.8.6

purl pkg:pypi/dulwich@0.8.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.8.6

url pkg:pypi/dulwich@0.8.7

purl pkg:pypi/dulwich@0.8.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.8.7

url pkg:pypi/dulwich@0.9.0

purl pkg:pypi/dulwich@0.9.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.9.0

url pkg:pypi/dulwich@0.9.1

purl pkg:pypi/dulwich@0.9.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.9.1

url pkg:pypi/dulwich@0.9.2

purl pkg:pypi/dulwich@0.9.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.9.2

url pkg:pypi/dulwich@0.9.3

purl pkg:pypi/dulwich@0.9.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.9.3

url pkg:pypi/dulwich@0.9.4

purl pkg:pypi/dulwich@0.9.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.9.4

url pkg:pypi/dulwich@0.9.5

purl pkg:pypi/dulwich@0.9.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.9.5

url pkg:pypi/dulwich@0.9.6

purl pkg:pypi/dulwich@0.9.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.9.6

url pkg:pypi/dulwich@0.9.7

purl pkg:pypi/dulwich@0.9.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.9.7

url pkg:pypi/dulwich@0.9.8

purl pkg:pypi/dulwich@0.9.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-74n4-53mc-2uc3

vulnerability	VCID-duga-b9sn-b7fc

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.9.8

url pkg:pypi/dulwich@0.9.9

purl pkg:pypi/dulwich@0.9.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.9.9

url pkg:pypi/dulwich@0.10.0

purl pkg:pypi/dulwich@0.10.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.10.0

url pkg:pypi/dulwich@0.10.1a

purl pkg:pypi/dulwich@0.10.1a

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.10.1a

url pkg:pypi/dulwich@0.10.1a0

purl pkg:pypi/dulwich@0.10.1a0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.10.1a0

url pkg:pypi/dulwich@0.11.0

purl pkg:pypi/dulwich@0.11.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.11.0

url pkg:pypi/dulwich@0.11.1

purl pkg:pypi/dulwich@0.11.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.11.1

url pkg:pypi/dulwich@0.11.2

purl pkg:pypi/dulwich@0.11.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.11.2

url pkg:pypi/dulwich@0.12.0

purl pkg:pypi/dulwich@0.12.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.12.0

url pkg:pypi/dulwich@0.13.0

purl pkg:pypi/dulwich@0.13.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.13.0

url pkg:pypi/dulwich@0.14.0

purl pkg:pypi/dulwich@0.14.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.14.0

url pkg:pypi/dulwich@0.14.1

purl pkg:pypi/dulwich@0.14.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.14.1

url pkg:pypi/dulwich@0.15.0

purl pkg:pypi/dulwich@0.15.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.15.0

url pkg:pypi/dulwich@0.16.0

purl pkg:pypi/dulwich@0.16.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.16.0

url pkg:pypi/dulwich@0.16.1

purl pkg:pypi/dulwich@0.16.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.16.1

url pkg:pypi/dulwich@0.16.2

purl pkg:pypi/dulwich@0.16.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.16.2

url pkg:pypi/dulwich@0.16.3

purl pkg:pypi/dulwich@0.16.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.16.3

url pkg:pypi/dulwich@0.17.1

purl pkg:pypi/dulwich@0.17.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.17.1

url pkg:pypi/dulwich@0.17.2

purl pkg:pypi/dulwich@0.17.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.17.2

url pkg:pypi/dulwich@0.17.3

purl pkg:pypi/dulwich@0.17.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.17.3

url pkg:pypi/dulwich@0.18.0

purl pkg:pypi/dulwich@0.18.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.18.0

url pkg:pypi/dulwich@0.18.1

purl pkg:pypi/dulwich@0.18.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.18.1

url pkg:pypi/dulwich@0.18.2

purl pkg:pypi/dulwich@0.18.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.18.2

url pkg:pypi/dulwich@0.18.3

purl pkg:pypi/dulwich@0.18.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.18.3

url pkg:pypi/dulwich@0.18.4

purl pkg:pypi/dulwich@0.18.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-wegc-1zcu-qygw

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/dulwich@0.18.4

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16228.json

reference_id

reference_type

scores

value	7.8
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16228.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2017-16228

reference_id

reference_type

scores

value	0.00424
scoring_system	epss
scoring_elements	0.62234
published_at	2026-04-21T12:55:00Z

value	0.00424
scoring_system	epss
scoring_elements	0.6225
published_at	2026-04-18T12:55:00Z

value	0.00424
scoring_system	epss
scoring_elements	0.62243
published_at	2026-04-16T12:55:00Z

value	0.00424
scoring_system	epss
scoring_elements	0.62229
published_at	2026-04-11T12:55:00Z

value	0.00424
scoring_system	epss
scoring_elements	0.62212
published_at	2026-04-09T12:55:00Z

value	0.00424
scoring_system	epss
scoring_elements	0.62194
published_at	2026-04-08T12:55:00Z

value	0.00424
scoring_system	epss
scoring_elements	0.62144
published_at	2026-04-07T12:55:00Z

value	0.00424
scoring_system	epss
scoring_elements	0.62176
published_at	2026-04-04T12:55:00Z

value	0.00424
scoring_system	epss
scoring_elements	0.62145
published_at	2026-04-02T12:55:00Z

value	0.00424
scoring_system	epss
scoring_elements	0.62084
published_at	2026-04-01T12:55:00Z

value	0.00424
scoring_system	epss
scoring_elements	0.62198
published_at	2026-04-13T12:55:00Z

value	0.00424
scoring_system	epss
scoring_elements	0.62219
published_at	2026-04-12T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2017-16228

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16228
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16228

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	10
scoring_system	cvssv2
scoring_elements	AV:N/AC:L/Au:N/C:C/I:C/A:C

value	9.8
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url

https://github.com/jelmer/dulwich

reference_id

reference_type

scores

value	9.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

value	9.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

value	CRITICAL
scoring_system	generic_textual
scoring_elements

url

https://github.com/jelmer/dulwich

reference_url

https://github.com/jelmer/dulwich/commit/7116a0cbbda571f7dac863f4b1c00b6e16d6d8d6

reference_id

reference_type

scores

value	9.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

value	9.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

value	CRITICAL
scoring_system	generic_textual
scoring_elements

url

https://github.com/jelmer/dulwich/commit/7116a0cbbda571f7dac863f4b1c00b6e16d6d8d6

reference_url

https://github.com/pypa/advisory-database/tree/main/vulns/dulwich/PYSEC-2017-12.yaml

reference_id

reference_type

scores

value	9.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

value	9.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

value	CRITICAL
scoring_system	generic_textual
scoring_elements

url

https://github.com/pypa/advisory-database/tree/main/vulns/dulwich/PYSEC-2017-12.yaml

reference_url

https://tracker.debian.org/news/882440

reference_id

reference_type

scores

value	9.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

value	9.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

value	CRITICAL
scoring_system	generic_textual
scoring_elements

url

https://tracker.debian.org/news/882440

reference_url

https://web.archive.org/web/20201220231743/https://www.dulwich.io/code/dulwich/commit/7116a0cbbda571f7dac863f4b1c00b6e16d6d8d6

reference_id

reference_type

scores

value	9.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

value	9.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

value	CRITICAL
scoring_system	generic_textual
scoring_elements

url

https://web.archive.org/web/20201220231743/https://www.dulwich.io/code/dulwich/commit/7116a0cbbda571f7dac863f4b1c00b6e16d6d8d6

reference_url

https://web.archive.org/web/20210128154006/https://www.dulwich.io/code/dulwich

reference_id

reference_type

scores

value	9.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

value	9.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

value	CRITICAL
scoring_system	generic_textual
scoring_elements

url

https://web.archive.org/web/20210128154006/https://www.dulwich.io/code/dulwich

reference_url

https://www.dulwich.io/code/dulwich

reference_id

reference_type

scores

value	9.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

value	9.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

value	CRITICAL
scoring_system	generic_textual
scoring_elements

url

https://www.dulwich.io/code/dulwich

reference_url	https://www.dulwich.io/code/dulwich/
reference_id
reference_type
scores
url	https://www.dulwich.io/code/dulwich/

reference_url

https://www.dulwich.io/code/dulwich/commit/7116a0cbbda571f7dac863f4b1c00b6e16d6d8d6

reference_id

reference_type

scores

value	9.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

value	9.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

value	CRITICAL
scoring_system	generic_textual
scoring_elements

url

https://www.dulwich.io/code/dulwich/commit/7116a0cbbda571f7dac863f4b1c00b6e16d6d8d6

reference_url	https://www.dulwich.io/code/dulwich/commit/7116a0cbbda571f7dac863f4b1c00b6e16d6d8d6/
reference_id
reference_type
scores
url	https://www.dulwich.io/code/dulwich/commit/7116a0cbbda571f7dac863f4b1c00b6e16d6d8d6/

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1509303
reference_id	1509303
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1509303

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:dulwich_project:dulwich::::::::
reference_id	cpe:2.3:a:dulwich_project:dulwich::::::::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:dulwich_project:dulwich::::::::

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2017-16228

reference_id

CVE-2017-16228

reference_type

scores

value	7.5
scoring_system	cvssv2
scoring_elements	AV:N/AC:L/Au:N/C:P/I:P/A:P

value	9.8
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

value	9.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

value	9.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

value	CRITICAL
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2017-16228

reference_url

https://github.com/advisories/GHSA-cwwh-4382-6fwr

reference_id

GHSA-cwwh-4382-6fwr

reference_type

scores

value	CRITICAL
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-cwwh-4382-6fwr

Weaknesses

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	20
name	Improper Input Validation
description	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Exploits

Severity_range_score 7.5 - 10.0

Exploitability 0.5

Weighted_severity 9.0

Risk_score 4.5

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wegc-1zcu-qygw

Vulnerability Instance