Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-fetp-hvhq-dube
SummaryNode.js: Node.js: Denial of Service via malformed Internationalized Domain Name processing
Aliases
0
alias CVE-2026-21712
Fixed_packages
0
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=loongarch64&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=loongarch64&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=loongarch64&distroversion=v3.23&reponame=main
1
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=s390x&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=s390x&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=s390x&distroversion=v3.23&reponame=main
2
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=armhf&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=armhf&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=armhf&distroversion=v3.23&reponame=main
3
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=armhf&distroversion=edge&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=armhf&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=armhf&distroversion=edge&reponame=main
4
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=armv7&distroversion=edge&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=armv7&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=armv7&distroversion=edge&reponame=main
5
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=loongarch64&distroversion=edge&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=loongarch64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=loongarch64&distroversion=edge&reponame=main
6
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=ppc64le&distroversion=edge&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=ppc64le&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=ppc64le&distroversion=edge&reponame=main
7
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=riscv64&distroversion=edge&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=riscv64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=riscv64&distroversion=edge&reponame=main
8
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=s390x&distroversion=edge&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=s390x&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=s390x&distroversion=edge&reponame=main
9
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=x86&distroversion=edge&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=x86&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=x86&distroversion=edge&reponame=main
10
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=aarch64&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=aarch64&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=aarch64&distroversion=v3.23&reponame=main
11
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=ppc64le&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=ppc64le&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=ppc64le&distroversion=v3.23&reponame=main
12
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=x86&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=x86&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=x86&distroversion=v3.23&reponame=main
13
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=aarch64&distroversion=edge&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=aarch64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=aarch64&distroversion=edge&reponame=main
14
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=x86_64&distroversion=edge&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=x86_64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=x86_64&distroversion=edge&reponame=main
15
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=armv7&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=armv7&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=armv7&distroversion=v3.23&reponame=main
16
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=riscv64&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=riscv64&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=riscv64&distroversion=v3.23&reponame=main
17
url pkg:apk/alpine/nodejs@24.14.1-r0?arch=x86_64&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/nodejs@24.14.1-r0?arch=x86_64&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/nodejs@24.14.1-r0%3Farch=x86_64&distroversion=v3.23&reponame=main
18
url pkg:deb/debian/nodejs@0?distro=trixie
purl pkg:deb/debian/nodejs@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@0%3Fdistro=trixie
19
url pkg:deb/debian/nodejs@12.22.12~dfsg-1~deb11u4?distro=trixie
purl pkg:deb/debian/nodejs@12.22.12~dfsg-1~deb11u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vp3-fzdr-yqbm
1
vulnerability VCID-2t7c-dju9-pff6
2
vulnerability VCID-38k9-23j3-eqh7
3
vulnerability VCID-43sf-4r41-wugc
4
vulnerability VCID-96yh-1wub-zucg
5
vulnerability VCID-98fy-tedc-ube7
6
vulnerability VCID-bjza-25hu-vkad
7
vulnerability VCID-dgkh-jdah-wfh9
8
vulnerability VCID-dt7u-3usg-9uet
9
vulnerability VCID-kj75-vmwa-gqgq
10
vulnerability VCID-sag8-repb-g3f4
11
vulnerability VCID-twc8-ewm7-wkb1
12
vulnerability VCID-u8bq-8jp4-jkem
13
vulnerability VCID-v7uy-445x-tuan
14
vulnerability VCID-x1an-pjq4-nbby
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@12.22.12~dfsg-1~deb11u4%3Fdistro=trixie
20
url pkg:deb/debian/nodejs@18.20.4%2Bdfsg-1~deb12u1?distro=trixie
purl pkg:deb/debian/nodejs@18.20.4%2Bdfsg-1~deb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vp3-fzdr-yqbm
1
vulnerability VCID-2t7c-dju9-pff6
2
vulnerability VCID-43sf-4r41-wugc
3
vulnerability VCID-96yh-1wub-zucg
4
vulnerability VCID-98fy-tedc-ube7
5
vulnerability VCID-bjza-25hu-vkad
6
vulnerability VCID-dgkh-jdah-wfh9
7
vulnerability VCID-dt7u-3usg-9uet
8
vulnerability VCID-twc8-ewm7-wkb1
9
vulnerability VCID-u8bq-8jp4-jkem
10
vulnerability VCID-v7uy-445x-tuan
11
vulnerability VCID-wf5t-3pwz-c7d7
12
vulnerability VCID-x1an-pjq4-nbby
13
vulnerability VCID-xkpz-pb5y-jqcy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@18.20.4%252Bdfsg-1~deb12u1%3Fdistro=trixie
21
url pkg:deb/debian/nodejs@20.19.2%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/nodejs@20.19.2%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@20.19.2%252Bdfsg-1%3Fdistro=trixie
22
url pkg:deb/debian/nodejs@22.22.2%2Bdfsg%2B~cs22.19.15-1?distro=trixie
purl pkg:deb/debian/nodejs@22.22.2%2Bdfsg%2B~cs22.19.15-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@22.22.2%252Bdfsg%252B~cs22.19.15-1%3Fdistro=trixie
23
url pkg:deb/debian/nodejs@22.22.2%2Bdfsg%2B~cs22.19.15-3?distro=trixie
purl pkg:deb/debian/nodejs@22.22.2%2Bdfsg%2B~cs22.19.15-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@22.22.2%252Bdfsg%252B~cs22.19.15-3%3Fdistro=trixie
Affected_packages
0
url pkg:rpm/redhat/nodejs24@1:24.14.1-2?arch=el10_1
purl pkg:rpm/redhat/nodejs24@1:24.14.1-2?arch=el10_1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vp3-fzdr-yqbm
1
vulnerability VCID-2t7c-dju9-pff6
2
vulnerability VCID-96yh-1wub-zucg
3
vulnerability VCID-bjza-25hu-vkad
4
vulnerability VCID-dgkh-jdah-wfh9
5
vulnerability VCID-dt7u-3usg-9uet
6
vulnerability VCID-fetp-hvhq-dube
7
vulnerability VCID-gv39-q6pw-yfh4
8
vulnerability VCID-hgd1-7u6j-p7dh
9
vulnerability VCID-hzsn-68be-dkej
10
vulnerability VCID-n6ew-t7g1-33gn
11
vulnerability VCID-ph2p-u33d-8yh3
12
vulnerability VCID-q4u6-6pbw-5bcq
13
vulnerability VCID-sy2z-sqgk-d7hg
14
vulnerability VCID-twc8-ewm7-wkb1
15
vulnerability VCID-vdca-exd1-rfce
16
vulnerability VCID-xert-byqc-xbe2
17
vulnerability VCID-z7ac-jr58-gkfm
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nodejs24@1:24.14.1-2%3Farch=el10_1
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-21712.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-21712.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-21712
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01719
published_at 2026-04-02T12:55:00Z
1
value 0.00014
scoring_system epss
scoring_elements 0.02676
published_at 2026-04-04T12:55:00Z
2
value 0.00015
scoring_system epss
scoring_elements 0.02781
published_at 2026-04-18T12:55:00Z
3
value 0.00015
scoring_system epss
scoring_elements 0.02838
published_at 2026-04-09T12:55:00Z
4
value 0.00015
scoring_system epss
scoring_elements 0.02807
published_at 2026-04-11T12:55:00Z
5
value 0.00015
scoring_system epss
scoring_elements 0.02788
published_at 2026-04-12T12:55:00Z
6
value 0.00015
scoring_system epss
scoring_elements 0.02784
published_at 2026-04-13T12:55:00Z
7
value 0.00015
scoring_system epss
scoring_elements 0.02769
published_at 2026-04-16T12:55:00Z
8
value 0.00015
scoring_system epss
scoring_elements 0.02814
published_at 2026-04-07T12:55:00Z
9
value 0.00015
scoring_system epss
scoring_elements 0.02817
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-21712
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2453037
reference_id 2453037
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2453037
4
reference_url https://hackerone.com/reports/3546390
reference_id 3546390
reference_type
scores
0
value 5.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-30T15:52:17Z/
url https://hackerone.com/reports/3546390
5
reference_url https://nodejs.org/en/blog/vulnerability/march-2026-security-releases
reference_id march-2026-security-releases
reference_type
scores
0
value 5.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-30T15:52:17Z/
url https://nodejs.org/en/blog/vulnerability/march-2026-security-releases
6
reference_url https://access.redhat.com/errata/RHSA-2026:7350
reference_id RHSA-2026:7350
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:7350
7
reference_url https://access.redhat.com/errata/RHSA-2026:7670
reference_id RHSA-2026:7670
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:7670
8
reference_url https://access.redhat.com/errata/RHSA-2026:7675
reference_id RHSA-2026:7675
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:7675
Weaknesses
0
cwe_id 168
name Improper Handling of Inconsistent Special Elements
description The product does not properly handle input in which an inconsistency exists between two or more special characters or reserved words.
Exploits
Severity_range_score5.7 - 6.5
Exploitability0.5
Weighted_severity5.9
Risk_score3.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-fetp-hvhq-dube