Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-rnuc-wtg3-r3cc
Summary
Multiple vulnerabilities have been found in JasPer, the worst of
    which could could allow an attacker to execute arbitrary code.
Aliases
0
alias CVE-2016-9591
Fixed_packages
0
url pkg:alpm/archlinux/jasper@2.0.12-1
purl pkg:alpm/archlinux/jasper@2.0.12-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/jasper@2.0.12-1
1
url pkg:deb/debian/jasper@1.900.1-debian1-2.4%2Bdeb8u3
purl pkg:deb/debian/jasper@1.900.1-debian1-2.4%2Bdeb8u3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jasper@1.900.1-debian1-2.4%252Bdeb8u3
2
url pkg:ebuild/media-libs/jasper@2.0.12
purl pkg:ebuild/media-libs/jasper@2.0.12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/media-libs/jasper@2.0.12
Affected_packages
0
url pkg:alpm/archlinux/jasper@2.0.10-1
purl pkg:alpm/archlinux/jasper@2.0.10-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mpy2-q1kz-mqbd
1
vulnerability VCID-rnuc-wtg3-r3cc
2
vulnerability VCID-zkh8-zsy4-7fhp
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/jasper@2.0.10-1
1
url pkg:deb/debian/jasper@1.701.0-2
purl pkg:deb/debian/jasper@1.701.0-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3m5a-x31m-wqhs
1
vulnerability VCID-6qcp-9kba-1khz
2
vulnerability VCID-9hdt-gf9q-skh8
3
vulnerability VCID-9kqw-qv6w-zugt
4
vulnerability VCID-bpmw-qhm1-audu
5
vulnerability VCID-ckw2-w524-k3gz
6
vulnerability VCID-d9ga-c25d-mfg5
7
vulnerability VCID-f3xd-54ke-1bf6
8
vulnerability VCID-hq12-wrsv-qffj
9
vulnerability VCID-k363-jg3m-1yhz
10
vulnerability VCID-m85g-54qv-h3at
11
vulnerability VCID-m93b-k4b2-zye1
12
vulnerability VCID-np35-vr8e-wqa9
13
vulnerability VCID-ptkv-jw36-cbar
14
vulnerability VCID-rnuc-wtg3-r3cc
15
vulnerability VCID-td6h-jus8-vfe9
16
vulnerability VCID-wrwt-qqrc-s7at
17
vulnerability VCID-yqjj-75r1-b3ht
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jasper@1.701.0-2
2
url pkg:deb/debian/jasper@1.900.1-5.1%2Blenny2
purl pkg:deb/debian/jasper@1.900.1-5.1%2Blenny2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3m5a-x31m-wqhs
1
vulnerability VCID-6qcp-9kba-1khz
2
vulnerability VCID-9hdt-gf9q-skh8
3
vulnerability VCID-9kqw-qv6w-zugt
4
vulnerability VCID-bpmw-qhm1-audu
5
vulnerability VCID-ckw2-w524-k3gz
6
vulnerability VCID-d9ga-c25d-mfg5
7
vulnerability VCID-f3xd-54ke-1bf6
8
vulnerability VCID-hq12-wrsv-qffj
9
vulnerability VCID-k363-jg3m-1yhz
10
vulnerability VCID-m85g-54qv-h3at
11
vulnerability VCID-m93b-k4b2-zye1
12
vulnerability VCID-np35-vr8e-wqa9
13
vulnerability VCID-ptkv-jw36-cbar
14
vulnerability VCID-rnuc-wtg3-r3cc
15
vulnerability VCID-td6h-jus8-vfe9
16
vulnerability VCID-wrwt-qqrc-s7at
17
vulnerability VCID-yqjj-75r1-b3ht
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jasper@1.900.1-5.1%252Blenny2
3
url pkg:deb/debian/jasper@1.900.1-7%2Bsqueeze1
purl pkg:deb/debian/jasper@1.900.1-7%2Bsqueeze1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3m5a-x31m-wqhs
1
vulnerability VCID-6qcp-9kba-1khz
2
vulnerability VCID-9hdt-gf9q-skh8
3
vulnerability VCID-9kqw-qv6w-zugt
4
vulnerability VCID-bpmw-qhm1-audu
5
vulnerability VCID-ckw2-w524-k3gz
6
vulnerability VCID-d9ga-c25d-mfg5
7
vulnerability VCID-f3xd-54ke-1bf6
8
vulnerability VCID-hq12-wrsv-qffj
9
vulnerability VCID-k363-jg3m-1yhz
10
vulnerability VCID-m85g-54qv-h3at
11
vulnerability VCID-m93b-k4b2-zye1
12
vulnerability VCID-np35-vr8e-wqa9
13
vulnerability VCID-ptkv-jw36-cbar
14
vulnerability VCID-rnuc-wtg3-r3cc
15
vulnerability VCID-td6h-jus8-vfe9
16
vulnerability VCID-wrwt-qqrc-s7at
17
vulnerability VCID-yqjj-75r1-b3ht
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jasper@1.900.1-7%252Bsqueeze1
4
url pkg:deb/debian/jasper@1.900.1-7%2Bsqueeze4
purl pkg:deb/debian/jasper@1.900.1-7%2Bsqueeze4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3m5a-x31m-wqhs
1
vulnerability VCID-6qcp-9kba-1khz
2
vulnerability VCID-9hdt-gf9q-skh8
3
vulnerability VCID-9kqw-qv6w-zugt
4
vulnerability VCID-bpmw-qhm1-audu
5
vulnerability VCID-ckw2-w524-k3gz
6
vulnerability VCID-d9ga-c25d-mfg5
7
vulnerability VCID-f3xd-54ke-1bf6
8
vulnerability VCID-hq12-wrsv-qffj
9
vulnerability VCID-k363-jg3m-1yhz
10
vulnerability VCID-m85g-54qv-h3at
11
vulnerability VCID-m93b-k4b2-zye1
12
vulnerability VCID-np35-vr8e-wqa9
13
vulnerability VCID-ptkv-jw36-cbar
14
vulnerability VCID-rnuc-wtg3-r3cc
15
vulnerability VCID-td6h-jus8-vfe9
16
vulnerability VCID-wrwt-qqrc-s7at
17
vulnerability VCID-yqjj-75r1-b3ht
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jasper@1.900.1-7%252Bsqueeze4
5
url pkg:deb/debian/jasper@1.900.1-13%2Bdeb7u4
purl pkg:deb/debian/jasper@1.900.1-13%2Bdeb7u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3m5a-x31m-wqhs
1
vulnerability VCID-6qcp-9kba-1khz
2
vulnerability VCID-9hdt-gf9q-skh8
3
vulnerability VCID-bpmw-qhm1-audu
4
vulnerability VCID-d9ga-c25d-mfg5
5
vulnerability VCID-hq12-wrsv-qffj
6
vulnerability VCID-k363-jg3m-1yhz
7
vulnerability VCID-m93b-k4b2-zye1
8
vulnerability VCID-np35-vr8e-wqa9
9
vulnerability VCID-ptkv-jw36-cbar
10
vulnerability VCID-rnuc-wtg3-r3cc
11
vulnerability VCID-td6h-jus8-vfe9
12
vulnerability VCID-wrwt-qqrc-s7at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jasper@1.900.1-13%252Bdeb7u4
6
url pkg:deb/debian/jasper@1.900.1-debian1-2.4
purl pkg:deb/debian/jasper@1.900.1-debian1-2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3m5a-x31m-wqhs
1
vulnerability VCID-6qcp-9kba-1khz
2
vulnerability VCID-9hdt-gf9q-skh8
3
vulnerability VCID-bpmw-qhm1-audu
4
vulnerability VCID-d9ga-c25d-mfg5
5
vulnerability VCID-hq12-wrsv-qffj
6
vulnerability VCID-k363-jg3m-1yhz
7
vulnerability VCID-m93b-k4b2-zye1
8
vulnerability VCID-np35-vr8e-wqa9
9
vulnerability VCID-ptkv-jw36-cbar
10
vulnerability VCID-rnuc-wtg3-r3cc
11
vulnerability VCID-td6h-jus8-vfe9
12
vulnerability VCID-wrwt-qqrc-s7at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jasper@1.900.1-debian1-2.4
7
url pkg:rpm/redhat/jasper@1.900.1-21?arch=el6_9
purl pkg:rpm/redhat/jasper@1.900.1-21?arch=el6_9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mns-2axr-w3a1
1
vulnerability VCID-3m5a-x31m-wqhs
2
vulnerability VCID-6qcp-9kba-1khz
3
vulnerability VCID-7m7h-qxef-xfec
4
vulnerability VCID-87vn-adcw-37bh
5
vulnerability VCID-9cz2-djvk-quc6
6
vulnerability VCID-9hdt-gf9q-skh8
7
vulnerability VCID-aehh-ywwn-byee
8
vulnerability VCID-bpmw-qhm1-audu
9
vulnerability VCID-cs69-t6yr-zubs
10
vulnerability VCID-d8pr-auwp-x7gd
11
vulnerability VCID-d9ga-c25d-mfg5
12
vulnerability VCID-dfkc-hyp3-6kbd
13
vulnerability VCID-fjpb-8pyh-67cb
14
vulnerability VCID-grw9-sn4c-57aj
15
vulnerability VCID-hc16-adzw-5fbz
16
vulnerability VCID-hdut-23jk-nfc5
17
vulnerability VCID-hmxs-jxny-j7bg
18
vulnerability VCID-hq12-wrsv-qffj
19
vulnerability VCID-k363-jg3m-1yhz
20
vulnerability VCID-kucv-63eu-cueq
21
vulnerability VCID-m93b-k4b2-zye1
22
vulnerability VCID-np35-vr8e-wqa9
23
vulnerability VCID-nwcp-qs7v-nfaa
24
vulnerability VCID-ptkv-jw36-cbar
25
vulnerability VCID-rnuc-wtg3-r3cc
26
vulnerability VCID-wpup-kuqp-fbeb
27
vulnerability VCID-wrwt-qqrc-s7at
28
vulnerability VCID-ykxn-bbsr-nycu
29
vulnerability VCID-zhwp-sauu-b3g6
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jasper@1.900.1-21%3Farch=el6_9
8
url pkg:rpm/redhat/jasper@1.900.1-30?arch=el7_3
purl pkg:rpm/redhat/jasper@1.900.1-30?arch=el7_3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mns-2axr-w3a1
1
vulnerability VCID-3m5a-x31m-wqhs
2
vulnerability VCID-6qcp-9kba-1khz
3
vulnerability VCID-7m7h-qxef-xfec
4
vulnerability VCID-87vn-adcw-37bh
5
vulnerability VCID-9cz2-djvk-quc6
6
vulnerability VCID-9hdt-gf9q-skh8
7
vulnerability VCID-aehh-ywwn-byee
8
vulnerability VCID-bpmw-qhm1-audu
9
vulnerability VCID-cs69-t6yr-zubs
10
vulnerability VCID-d8pr-auwp-x7gd
11
vulnerability VCID-d9ga-c25d-mfg5
12
vulnerability VCID-dfkc-hyp3-6kbd
13
vulnerability VCID-fjpb-8pyh-67cb
14
vulnerability VCID-grw9-sn4c-57aj
15
vulnerability VCID-hc16-adzw-5fbz
16
vulnerability VCID-hdut-23jk-nfc5
17
vulnerability VCID-hmxs-jxny-j7bg
18
vulnerability VCID-hq12-wrsv-qffj
19
vulnerability VCID-k363-jg3m-1yhz
20
vulnerability VCID-kucv-63eu-cueq
21
vulnerability VCID-m93b-k4b2-zye1
22
vulnerability VCID-np35-vr8e-wqa9
23
vulnerability VCID-nwcp-qs7v-nfaa
24
vulnerability VCID-ptkv-jw36-cbar
25
vulnerability VCID-rnuc-wtg3-r3cc
26
vulnerability VCID-wpup-kuqp-fbeb
27
vulnerability VCID-wrwt-qqrc-s7at
28
vulnerability VCID-ykxn-bbsr-nycu
29
vulnerability VCID-zhwp-sauu-b3g6
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jasper@1.900.1-30%3Farch=el7_3
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9591.json
reference_id
reference_type
scores
0
value 7.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9591.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-9591
reference_id
reference_type
scores
0
value 0.00479
scoring_system epss
scoring_elements 0.64917
published_at 2026-04-01T12:55:00Z
1
value 0.00479
scoring_system epss
scoring_elements 0.65032
published_at 2026-04-21T12:55:00Z
2
value 0.00479
scoring_system epss
scoring_elements 0.65037
published_at 2026-04-16T12:55:00Z
3
value 0.00479
scoring_system epss
scoring_elements 0.65047
published_at 2026-04-18T12:55:00Z
4
value 0.00479
scoring_system epss
scoring_elements 0.64967
published_at 2026-04-02T12:55:00Z
5
value 0.00479
scoring_system epss
scoring_elements 0.64994
published_at 2026-04-04T12:55:00Z
6
value 0.00479
scoring_system epss
scoring_elements 0.64957
published_at 2026-04-07T12:55:00Z
7
value 0.00479
scoring_system epss
scoring_elements 0.65006
published_at 2026-04-08T12:55:00Z
8
value 0.00479
scoring_system epss
scoring_elements 0.65021
published_at 2026-04-09T12:55:00Z
9
value 0.00479
scoring_system epss
scoring_elements 0.65038
published_at 2026-04-11T12:55:00Z
10
value 0.00479
scoring_system epss
scoring_elements 0.65028
published_at 2026-04-12T12:55:00Z
11
value 0.00479
scoring_system epss
scoring_elements 0.65
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-9591
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10249
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10249
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10251
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10251
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9591
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9591
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1406405
reference_id 1406405
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1406405
7
reference_url https://security.archlinux.org/ASA-201703-9
reference_id ASA-201703-9
reference_type
scores
url https://security.archlinux.org/ASA-201703-9
8
reference_url https://security.archlinux.org/AVG-69
reference_id AVG-69
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-69
9
reference_url https://security.gentoo.org/glsa/201707-07
reference_id GLSA-201707-07
reference_type
scores
url https://security.gentoo.org/glsa/201707-07
10
reference_url https://access.redhat.com/errata/RHSA-2017:1208
reference_id RHSA-2017:1208
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1208
11
reference_url https://usn.ubuntu.com/3295-1/
reference_id USN-3295-1
reference_type
scores
url https://usn.ubuntu.com/3295-1/
Weaknesses
0
cwe_id 416
name Use After Free
description Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.
Exploits
Severity_range_score6.8 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-rnuc-wtg3-r3cc