Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-1kpm-7xc6-vbh4
SummaryA vulnerability was determined in Wooey up to 0.13.2. The impacted element is the function add_or_update_script of the file wooey/api/scripts.py of the component API Endpoint. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.13.3rc1 and 0.14.0 is sufficient to resolve this issue. This patch is called f7846fc0c323da8325422cab32623491757f1b88. The affected component should be upgraded.
Aliases
0
alias CVE-2026-7142
1
alias GHSA-w65c-cmxj-qrhm
Fixed_packages
0
url pkg:pypi/wooey@0.13.3rc1
purl pkg:pypi/wooey@0.13.3rc1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.13.3rc1
Affected_packages
0
url pkg:pypi/wooey@0.0.1
purl pkg:pypi/wooey@0.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.0.1
1
url pkg:pypi/wooey@0.0.2
purl pkg:pypi/wooey@0.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.0.2
2
url pkg:pypi/wooey@0.0.3
purl pkg:pypi/wooey@0.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.0.3
3
url pkg:pypi/wooey@0.0.4
purl pkg:pypi/wooey@0.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.0.4
4
url pkg:pypi/wooey@0.9.0
purl pkg:pypi/wooey@0.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.9.0
5
url pkg:pypi/wooey@0.9.1
purl pkg:pypi/wooey@0.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.9.1
6
url pkg:pypi/wooey@0.9.2
purl pkg:pypi/wooey@0.9.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.9.2
7
url pkg:pypi/wooey@0.9.3
purl pkg:pypi/wooey@0.9.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.9.3
8
url pkg:pypi/wooey@0.9.4
purl pkg:pypi/wooey@0.9.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.9.4
9
url pkg:pypi/wooey@0.9.5
purl pkg:pypi/wooey@0.9.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.9.5
10
url pkg:pypi/wooey@0.9.6
purl pkg:pypi/wooey@0.9.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.9.6
11
url pkg:pypi/wooey@0.9.8
purl pkg:pypi/wooey@0.9.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.9.8
12
url pkg:pypi/wooey@0.9.9
purl pkg:pypi/wooey@0.9.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.9.9
13
url pkg:pypi/wooey@0.9.10
purl pkg:pypi/wooey@0.9.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.9.10
14
url pkg:pypi/wooey@0.9.11
purl pkg:pypi/wooey@0.9.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.9.11
15
url pkg:pypi/wooey@0.10.dev0
purl pkg:pypi/wooey@0.10.dev0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.10.dev0
16
url pkg:pypi/wooey@0.10.0
purl pkg:pypi/wooey@0.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.10.0
17
url pkg:pypi/wooey@0.10.1
purl pkg:pypi/wooey@0.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.10.1
18
url pkg:pypi/wooey@0.11.0rc1
purl pkg:pypi/wooey@0.11.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.11.0rc1
19
url pkg:pypi/wooey@0.11.0rc2
purl pkg:pypi/wooey@0.11.0rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.11.0rc2
20
url pkg:pypi/wooey@0.11.0rc3
purl pkg:pypi/wooey@0.11.0rc3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.11.0rc3
21
url pkg:pypi/wooey@0.11.0
purl pkg:pypi/wooey@0.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.11.0
22
url pkg:pypi/wooey@0.11.1rc2
purl pkg:pypi/wooey@0.11.1rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.11.1rc2
23
url pkg:pypi/wooey@0.11.1rc3
purl pkg:pypi/wooey@0.11.1rc3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.11.1rc3
24
url pkg:pypi/wooey@0.11.1rc4
purl pkg:pypi/wooey@0.11.1rc4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.11.1rc4
25
url pkg:pypi/wooey@0.11.1rc5
purl pkg:pypi/wooey@0.11.1rc5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.11.1rc5
26
url pkg:pypi/wooey@0.11.1rc6
purl pkg:pypi/wooey@0.11.1rc6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.11.1rc6
27
url pkg:pypi/wooey@0.11.1rc7
purl pkg:pypi/wooey@0.11.1rc7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.11.1rc7
28
url pkg:pypi/wooey@0.11.1
purl pkg:pypi/wooey@0.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.11.1
29
url pkg:pypi/wooey@0.12.0rc1
purl pkg:pypi/wooey@0.12.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.12.0rc1
30
url pkg:pypi/wooey@0.12.0rc2
purl pkg:pypi/wooey@0.12.0rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.12.0rc2
31
url pkg:pypi/wooey@0.12.0rc3
purl pkg:pypi/wooey@0.12.0rc3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.12.0rc3
32
url pkg:pypi/wooey@0.12.0
purl pkg:pypi/wooey@0.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.12.0
33
url pkg:pypi/wooey@0.13.0
purl pkg:pypi/wooey@0.13.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.13.0
34
url pkg:pypi/wooey@0.13.1
purl pkg:pypi/wooey@0.13.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.13.1
35
url pkg:pypi/wooey@0.13.2rc1
purl pkg:pypi/wooey@0.13.2rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.13.2rc1
36
url pkg:pypi/wooey@0.13.2rc2
purl pkg:pypi/wooey@0.13.2rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.13.2rc2
37
url pkg:pypi/wooey@0.13.2rc3
purl pkg:pypi/wooey@0.13.2rc3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.13.2rc3
38
url pkg:pypi/wooey@0.13.2
purl pkg:pypi/wooey@0.13.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kpm-7xc6-vbh4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/wooey@0.13.2
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-7142
reference_id
reference_type
scores
0
value 0.00054
scoring_system epss
scoring_elements 0.1716
published_at 2026-06-11T12:55:00Z
1
value 0.00054
scoring_system epss
scoring_elements 0.17312
published_at 2026-06-14T12:55:00Z
2
value 0.00054
scoring_system epss
scoring_elements 0.17338
published_at 2026-06-13T12:55:00Z
3
value 0.00054
scoring_system epss
scoring_elements 0.17322
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-7142
1
reference_url https://github.com/wooey/Wooey
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 2.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/wooey/Wooey
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-7142
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 2.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-7142
3
reference_url https://vuldb.com/vuln/359741
reference_id 359741
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
3
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
4
value 2.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T19:37:14Z/
url https://vuldb.com/vuln/359741
4
reference_url https://github.com/wooey/Wooey/pull/407
reference_id 407
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
3
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
4
value 2.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T19:37:14Z/
url https://github.com/wooey/Wooey/pull/407
5
reference_url https://github.com/wooey/Wooey/issues/408
reference_id 408
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
3
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
4
value 2.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T19:37:14Z/
url https://github.com/wooey/Wooey/issues/408
6
reference_url https://vuldb.com/submit/801533
reference_id 801533
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
3
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
4
value 2.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T19:37:14Z/
url https://vuldb.com/submit/801533
7
reference_url https://vuldb.com/vuln/359741/cti
reference_id cti
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
3
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
4
value 2.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T19:37:14Z/
url https://vuldb.com/vuln/359741/cti
8
reference_url https://github.com/wooey/Wooey/commit/f7846fc0c323da8325422cab32623491757f1b88
reference_id f7846fc0c323da8325422cab32623491757f1b88
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
3
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
4
value 2.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T19:37:14Z/
url https://github.com/wooey/Wooey/commit/f7846fc0c323da8325422cab32623491757f1b88
9
reference_url https://github.com/advisories/GHSA-w65c-cmxj-qrhm
reference_id GHSA-w65c-cmxj-qrhm
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w65c-cmxj-qrhm
10
reference_url https://github.com/wooey/Wooey/releases/tag/v0.13.3rc1
reference_id v0.13.3rc1
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
3
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
4
value 2.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T19:37:14Z/
url https://github.com/wooey/Wooey/releases/tag/v0.13.3rc1
11
reference_url https://github.com/wooey/Wooey/
reference_id Wooey
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
3
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T19:37:14Z/
url https://github.com/wooey/Wooey/
Weaknesses
0
cwe_id 266
name Incorrect Privilege Assignment
description A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
1
cwe_id 285
name Improper Authorization
description The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score0.1 - 6.5
Exploitability0.5
Weighted_severity5.9
Risk_score3.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-1kpm-7xc6-vbh4