Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-m6ct-n9hk-h3g4

Summary

Regular Expression Denial of Service
semver is vulnerable to regular expression denial of service when extremely long version strings are parsed.

Aliases

alias	GMS-2015-9

Fixed_packages

url pkg:npm/semver@4.3.2

purl pkg:npm/semver@4.3.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@4.3.2

Affected_packages

url pkg:npm/semver@1.0.0

purl pkg:npm/semver@1.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.0

url pkg:npm/semver@1.0.1

purl pkg:npm/semver@1.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.1

url pkg:npm/semver@1.0.2

purl pkg:npm/semver@1.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.2

url pkg:npm/semver@1.0.3

purl pkg:npm/semver@1.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.3

url pkg:npm/semver@1.0.4

purl pkg:npm/semver@1.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.4

url pkg:npm/semver@1.0.5

purl pkg:npm/semver@1.0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.5

url pkg:npm/semver@1.0.6

purl pkg:npm/semver@1.0.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.6

url pkg:npm/semver@1.0.7

purl pkg:npm/semver@1.0.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.7

url pkg:npm/semver@1.0.8

purl pkg:npm/semver@1.0.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.8

url pkg:npm/semver@1.0.9

purl pkg:npm/semver@1.0.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.9

url pkg:npm/semver@1.0.10

purl pkg:npm/semver@1.0.10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.10

url pkg:npm/semver@1.0.11

purl pkg:npm/semver@1.0.11

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.11

url pkg:npm/semver@1.0.12

purl pkg:npm/semver@1.0.12

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.12

url pkg:npm/semver@1.0.13

purl pkg:npm/semver@1.0.13

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.13

url pkg:npm/semver@1.0.14

purl pkg:npm/semver@1.0.14

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.0.14

url pkg:npm/semver@1.1.0

purl pkg:npm/semver@1.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.1.0

url pkg:npm/semver@1.1.1

purl pkg:npm/semver@1.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.1.1

url pkg:npm/semver@1.1.2

purl pkg:npm/semver@1.1.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.1.2

url pkg:npm/semver@1.1.3

purl pkg:npm/semver@1.1.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.1.3

url pkg:npm/semver@1.1.4

purl pkg:npm/semver@1.1.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@1.1.4

url pkg:npm/semver@2.0.0-alpha

purl pkg:npm/semver@2.0.0-alpha

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.0.0-alpha

url pkg:npm/semver@2.0.0-beta

purl pkg:npm/semver@2.0.0-beta

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.0.0-beta

url pkg:npm/semver@2.0.1

purl pkg:npm/semver@2.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.0.1

url pkg:npm/semver@2.0.2

purl pkg:npm/semver@2.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.0.2

url pkg:npm/semver@2.0.3

purl pkg:npm/semver@2.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.0.3

url pkg:npm/semver@2.0.4

purl pkg:npm/semver@2.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.0.4

url pkg:npm/semver@2.0.5

purl pkg:npm/semver@2.0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.0.5

url pkg:npm/semver@2.0.6

purl pkg:npm/semver@2.0.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.0.6

url pkg:npm/semver@2.0.7

purl pkg:npm/semver@2.0.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.0.7

url pkg:npm/semver@2.0.8

purl pkg:npm/semver@2.0.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.0.8

url pkg:npm/semver@2.0.9

purl pkg:npm/semver@2.0.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.0.9

url pkg:npm/semver@2.0.10

purl pkg:npm/semver@2.0.10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.0.10

url pkg:npm/semver@2.0.11

purl pkg:npm/semver@2.0.11

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.0.11

url pkg:npm/semver@2.1.0

purl pkg:npm/semver@2.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.1.0

url pkg:npm/semver@2.2.0

purl pkg:npm/semver@2.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.2.0

url pkg:npm/semver@2.2.1

purl pkg:npm/semver@2.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.2.1

url pkg:npm/semver@2.3.0

purl pkg:npm/semver@2.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.3.0

url pkg:npm/semver@2.3.1

purl pkg:npm/semver@2.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.3.1

url pkg:npm/semver@2.3.2

purl pkg:npm/semver@2.3.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@2.3.2

url pkg:npm/semver@3.0.0

purl pkg:npm/semver@3.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@3.0.0

url pkg:npm/semver@3.0.1

purl pkg:npm/semver@3.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@3.0.1

url pkg:npm/semver@4.0.0

purl pkg:npm/semver@4.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@4.0.0

url pkg:npm/semver@4.0.2

purl pkg:npm/semver@4.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@4.0.2

url pkg:npm/semver@4.0.3

purl pkg:npm/semver@4.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@4.0.3

url pkg:npm/semver@4.1.0

purl pkg:npm/semver@4.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@4.1.0

url pkg:npm/semver@4.1.1

purl pkg:npm/semver@4.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@4.1.1

url pkg:npm/semver@4.2.0

purl pkg:npm/semver@4.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@4.2.0

url pkg:npm/semver@4.2.1

purl pkg:npm/semver@4.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@4.2.1

url pkg:npm/semver@4.2.2

purl pkg:npm/semver@4.2.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@4.2.2

url pkg:npm/semver@4.3.0

purl pkg:npm/semver@4.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@4.3.0

url pkg:npm/semver@4.3.1

purl pkg:npm/semver@4.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1tme-dh4y-a3dq

vulnerability	VCID-m6ct-n9hk-h3g4

vulnerability	VCID-nahx-etfu-qqfq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/semver@4.3.1

References

reference_url	https://github.com/npm/node-semver/commit/c80180d8341a8ada0236815c29a2be59864afd70
reference_id
reference_type
scores
url	https://github.com/npm/node-semver/commit/c80180d8341a8ada0236815c29a2be59864afd70

reference_url	https://github.com/npm/npm/releases/tag/v2.7.5
reference_id
reference_type
scores
url	https://github.com/npm/npm/releases/tag/v2.7.5

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score null

Exploitability 0.5

Weighted_severity 0.0

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m6ct-n9hk-h3g4

Vulnerability Instance