Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/57251?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/57251?format=api", "vulnerability_id": "VCID-gxmq-8d4q-xqdm", "summary": "Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields\n`{field}.isFilterable` access control can be bypassed in `update` and `delete` mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields.\n\nSpecifically, when a mutation includes a `where` clause with multiple unique filters (e.g. `id` and `email`), Keystone will attempt to match records even if filtering by the latter fields would normally be rejected by `field.isFilterable` or `list.defaultIsFilterable`. This can allow malicious actors to infer the presence of a particular field value when a filter is successful in returning a result.", "aliases": [ { "alias": "CVE-2025-46720" }, { "alias": "GHSA-hg9m-67mm-7pg3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/85043?format=api", "purl": "pkg:npm/%40keystone-6/core@6.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@6.5.0" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/817070?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-latest-20240409104836", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-latest-20240409104836" }, { "url": "http://public2.vulnerablecode.io/api/packages/656152?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20221013033655", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20221013033655" }, { "url": "http://public2.vulnerablecode.io/api/packages/656153?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20230214225011", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20230214225011" }, { "url": "http://public2.vulnerablecode.io/api/packages/656154?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20230220024700", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20230220024700" }, { "url": "http://public2.vulnerablecode.io/api/packages/656155?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20230328041955", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20230328041955" }, { "url": "http://public2.vulnerablecode.io/api/packages/656156?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20230329060432", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20230329060432" }, { "url": "http://public2.vulnerablecode.io/api/packages/656157?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20230330050032", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20230330050032" }, { "url": "http://public2.vulnerablecode.io/api/packages/656158?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20230412063326", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20230412063326" }, { "url": "http://public2.vulnerablecode.io/api/packages/656159?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20230412064346", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20230412064346" }, { "url": "http://public2.vulnerablecode.io/api/packages/656160?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20230512055539", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20230512055539" }, { "url": "http://public2.vulnerablecode.io/api/packages/656161?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20230523070754", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20230523070754" }, { "url": "http://public2.vulnerablecode.io/api/packages/817071?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20240419043059", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20240419043059" }, { "url": "http://public2.vulnerablecode.io/api/packages/817072?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20240429035832", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20240429035832" }, { "url": "http://public2.vulnerablecode.io/api/packages/817073?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250210004303", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250210004303" }, { "url": "http://public2.vulnerablecode.io/api/packages/817074?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250212061115", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250212061115" }, { "url": "http://public2.vulnerablecode.io/api/packages/817075?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250217014122", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250217014122" }, { "url": "http://public2.vulnerablecode.io/api/packages/817076?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250224052246", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250224052246" }, { "url": "http://public2.vulnerablecode.io/api/packages/817077?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250224060915", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250224060915" }, { "url": "http://public2.vulnerablecode.io/api/packages/817078?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250224061709", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250224061709" }, { "url": "http://public2.vulnerablecode.io/api/packages/817079?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250225040142", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250225040142" }, { "url": "http://public2.vulnerablecode.io/api/packages/817080?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250306003711", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250306003711" }, { "url": "http://public2.vulnerablecode.io/api/packages/817081?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250319051651", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250319051651" }, { "url": "http://public2.vulnerablecode.io/api/packages/817082?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250320011436", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250320011436" }, { "url": "http://public2.vulnerablecode.io/api/packages/817083?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250320054905", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250320054905" }, { "url": "http://public2.vulnerablecode.io/api/packages/817084?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250320063903", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250320063903" }, { "url": "http://public2.vulnerablecode.io/api/packages/817085?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250320231804", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250320231804" }, { "url": "http://public2.vulnerablecode.io/api/packages/817086?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250321015903", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250321015903" }, { "url": "http://public2.vulnerablecode.io/api/packages/817087?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250326012445", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250326012445" }, { "url": "http://public2.vulnerablecode.io/api/packages/817088?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250326032843", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250326032843" }, { "url": "http://public2.vulnerablecode.io/api/packages/817089?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250402042704", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250402042704" }, { "url": "http://public2.vulnerablecode.io/api/packages/817090?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250408002352", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250408002352" }, { "url": "http://public2.vulnerablecode.io/api/packages/817091?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250409043612", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250409043612" }, { "url": "http://public2.vulnerablecode.io/api/packages/817092?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250501042627", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250501042627" }, { "url": "http://public2.vulnerablecode.io/api/packages/817093?format=api", "purl": "pkg:npm/%40keystone-6/core@0.0.0-rc-20250502025111", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@0.0.0-rc-20250502025111" }, { "url": "http://public2.vulnerablecode.io/api/packages/656162?format=api", "purl": "pkg:npm/%40keystone-6/core@1.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@1.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/656163?format=api", "purl": "pkg:npm/%40keystone-6/core@1.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@1.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/656164?format=api", "purl": "pkg:npm/%40keystone-6/core@1.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@1.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/656165?format=api", "purl": "pkg:npm/%40keystone-6/core@1.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@1.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/656166?format=api", "purl": "pkg:npm/%40keystone-6/core@2.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@2.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/656167?format=api", "purl": "pkg:npm/%40keystone-6/core@2.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@2.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/504545?format=api", "purl": "pkg:npm/%40keystone-6/core@2.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-k428-up64-47d9" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@2.2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/615328?format=api", "purl": "pkg:npm/%40keystone-6/core@2.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-k428-up64-47d9" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@2.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/145010?format=api", "purl": "pkg:npm/%40keystone-6/core@2.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@2.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/504630?format=api", "purl": "pkg:npm/%40keystone-6/core@3.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-r13j-pm6j-8ubf" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@3.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/618568?format=api", "purl": "pkg:npm/%40keystone-6/core@3.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-r13j-pm6j-8ubf" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@3.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/148805?format=api", "purl": "pkg:npm/%40keystone-6/core@3.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@3.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/656168?format=api", "purl": "pkg:npm/%40keystone-6/core@3.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@3.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/656169?format=api", "purl": "pkg:npm/%40keystone-6/core@3.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@3.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/656170?format=api", "purl": "pkg:npm/%40keystone-6/core@3.1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@3.1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/656171?format=api", "purl": "pkg:npm/%40keystone-6/core@3.1.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@3.1.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/656172?format=api", "purl": "pkg:npm/%40keystone-6/core@4.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@4.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/656173?format=api", "purl": "pkg:npm/%40keystone-6/core@4.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@4.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/656174?format=api", "purl": "pkg:npm/%40keystone-6/core@5.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@5.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/656175?format=api", "purl": "pkg:npm/%40keystone-6/core@5.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@5.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/656176?format=api", "purl": "pkg:npm/%40keystone-6/core@5.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@5.2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/656177?format=api", "purl": "pkg:npm/%40keystone-6/core@5.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@5.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/65373?format=api", "purl": "pkg:npm/%40keystone-6/core@5.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" }, { "vulnerability": "VCID-tqye-27ur-eyf5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@5.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/670793?format=api", "purl": "pkg:npm/%40keystone-6/core@5.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@5.3.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/670794?format=api", "purl": "pkg:npm/%40keystone-6/core@5.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@5.4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/670795?format=api", "purl": "pkg:npm/%40keystone-6/core@5.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" }, { "vulnerability": "VCID-ppy6-36tw-sqft" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@5.5.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/66565?format=api", "purl": "pkg:npm/%40keystone-6/core@5.5.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@5.5.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/817094?format=api", "purl": "pkg:npm/%40keystone-6/core@5.6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@5.6.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/817095?format=api", "purl": "pkg:npm/%40keystone-6/core@5.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@5.7.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/817096?format=api", "purl": "pkg:npm/%40keystone-6/core@5.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@5.7.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/817097?format=api", "purl": "pkg:npm/%40keystone-6/core@5.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@5.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/817098?format=api", "purl": "pkg:npm/%40keystone-6/core@5.8.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@5.8.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/817099?format=api", "purl": "pkg:npm/%40keystone-6/core@6.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@6.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/817100?format=api", "purl": "pkg:npm/%40keystone-6/core@6.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@6.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/817101?format=api", "purl": "pkg:npm/%40keystone-6/core@6.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@6.2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/817102?format=api", "purl": "pkg:npm/%40keystone-6/core@6.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@6.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/817103?format=api", "purl": "pkg:npm/%40keystone-6/core@6.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@6.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/817104?format=api", "purl": "pkg:npm/%40keystone-6/core@6.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5kdx-3r3z-nye2" }, { "vulnerability": "VCID-gxmq-8d4q-xqdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystone-6/core@6.4.0" } ], "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-46720", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19561", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19444", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19513", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19556", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-46720" }, { "reference_url": "https://github.com/keystonejs/keystone", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/keystonejs/keystone" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46720", "reference_id": "CVE-2025-46720", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46720" }, { "reference_url": "https://github.com/advisories/GHSA-hg9m-67mm-7pg3", "reference_id": "GHSA-hg9m-67mm-7pg3", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-hg9m-67mm-7pg3" }, { "reference_url": "https://github.com/keystonejs/keystone/security/advisories/GHSA-hg9m-67mm-7pg3", "reference_id": "GHSA-hg9m-67mm-7pg3", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-05T18:59:54Z/" } ], "url": "https://github.com/keystonejs/keystone/security/advisories/GHSA-hg9m-67mm-7pg3" } ], "weaknesses": [ { "cwe_id": 200, "name": "Exposure of Sensitive Information to an Unauthorized Actor", "description": "The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information." }, { "cwe_id": 203, "name": "Observable Discrepancy", "description": "The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." } ], "exploits": [], "severity_range_score": "0.1 - 3.1", "exploitability": "0.5", "weighted_severity": "2.8", "risk_score": 1.4, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gxmq-8d4q-xqdm" }