Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-49pa-4aeh-uuer
SummaryAn exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability.
Aliases
0
alias CVE-2017-2809
1
alias GHSA-c2w9-48qc-qpj4
2
alias PYSEC-2017-5
Fixed_packages
0
url pkg:pypi/ansible@1.1
purl pkg:pypi/ansible@1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-24vk-y12h-nbau
1
vulnerability VCID-257n-yc2z-hfe8
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-5mcc-gtrr-j3e4
7
vulnerability VCID-5r2p-dxtk-pkas
8
vulnerability VCID-664v-ms96-jfd2
9
vulnerability VCID-6hdk-ywcn-4qe4
10
vulnerability VCID-6smx-ju23-8qes
11
vulnerability VCID-6swz-79ue-bbef
12
vulnerability VCID-7f2g-zz9p-sufc
13
vulnerability VCID-7v54-buz9-8bbu
14
vulnerability VCID-826d-vdw1-dbaj
15
vulnerability VCID-95kg-bk3s-g7gx
16
vulnerability VCID-a1as-vf3m-ukev
17
vulnerability VCID-a7rr-4bvy-7yh9
18
vulnerability VCID-axds-bd49-fbdj
19
vulnerability VCID-b423-t4kx-eqbq
20
vulnerability VCID-b8cv-v25q-1kh3
21
vulnerability VCID-bmq3-uckn-tfhk
22
vulnerability VCID-brft-snn6-guc8
23
vulnerability VCID-d3nw-dz41-wfg2
24
vulnerability VCID-d8by-xxm3-xkhb
25
vulnerability VCID-duwt-5mk2-8kbf
26
vulnerability VCID-ekyn-s6c7-pqbs
27
vulnerability VCID-enwa-2cfn-5uab
28
vulnerability VCID-fqqe-j2g8-k3gr
29
vulnerability VCID-hyr1-b223-bkef
30
vulnerability VCID-j4px-r23h-9kb7
31
vulnerability VCID-ja3g-kwep-7yhr
32
vulnerability VCID-kgjy-7kdy-c3cg
33
vulnerability VCID-kzey-xd5m-j7bu
34
vulnerability VCID-m87b-eb5y-8ydf
35
vulnerability VCID-mcmb-z5r5-4ug8
36
vulnerability VCID-n2b8-e8fa-2ue1
37
vulnerability VCID-nn62-vxhh-zfcs
38
vulnerability VCID-nx86-xnct-afbs
39
vulnerability VCID-p6cz-c9ah-c7cp
40
vulnerability VCID-pntx-wfhx-p3aa
41
vulnerability VCID-qbws-64b9-83fc
42
vulnerability VCID-qpsu-er16-a7dc
43
vulnerability VCID-qtt6-8kf8-1fbt
44
vulnerability VCID-rarq-tdjt-hff3
45
vulnerability VCID-rc9e-eprg-pfdg
46
vulnerability VCID-rgk8-k53p-gkft
47
vulnerability VCID-rnub-zmb6-5yhw
48
vulnerability VCID-s2w1-fedq-ckes
49
vulnerability VCID-sn3p-chty-aqen
50
vulnerability VCID-tfhg-gzz2-7qc5
51
vulnerability VCID-u1pn-s2ug-nucg
52
vulnerability VCID-uvca-5e2n-pqew
53
vulnerability VCID-vtec-237j-1ua2
54
vulnerability VCID-xk7s-y611-mffc
55
vulnerability VCID-xn7b-vz2e-6qdh
56
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@1.1
1
url pkg:pypi/ansible-vault@1.0.5
purl pkg:pypi/ansible-vault@1.0.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible-vault@1.0.5
Affected_packages
0
url pkg:pypi/ansible@1.0
purl pkg:pypi/ansible@1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-24vk-y12h-nbau
1
vulnerability VCID-257n-yc2z-hfe8
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-49pa-4aeh-uuer
7
vulnerability VCID-5mcc-gtrr-j3e4
8
vulnerability VCID-5r2p-dxtk-pkas
9
vulnerability VCID-664v-ms96-jfd2
10
vulnerability VCID-6hdk-ywcn-4qe4
11
vulnerability VCID-6smx-ju23-8qes
12
vulnerability VCID-6swz-79ue-bbef
13
vulnerability VCID-7f2g-zz9p-sufc
14
vulnerability VCID-7v54-buz9-8bbu
15
vulnerability VCID-826d-vdw1-dbaj
16
vulnerability VCID-95kg-bk3s-g7gx
17
vulnerability VCID-a1as-vf3m-ukev
18
vulnerability VCID-a7rr-4bvy-7yh9
19
vulnerability VCID-axds-bd49-fbdj
20
vulnerability VCID-b423-t4kx-eqbq
21
vulnerability VCID-b8cv-v25q-1kh3
22
vulnerability VCID-bmq3-uckn-tfhk
23
vulnerability VCID-brft-snn6-guc8
24
vulnerability VCID-d3nw-dz41-wfg2
25
vulnerability VCID-d8by-xxm3-xkhb
26
vulnerability VCID-duwt-5mk2-8kbf
27
vulnerability VCID-ekyn-s6c7-pqbs
28
vulnerability VCID-enwa-2cfn-5uab
29
vulnerability VCID-fqqe-j2g8-k3gr
30
vulnerability VCID-hyr1-b223-bkef
31
vulnerability VCID-j4px-r23h-9kb7
32
vulnerability VCID-ja3g-kwep-7yhr
33
vulnerability VCID-kgjy-7kdy-c3cg
34
vulnerability VCID-kzey-xd5m-j7bu
35
vulnerability VCID-m87b-eb5y-8ydf
36
vulnerability VCID-mcmb-z5r5-4ug8
37
vulnerability VCID-n2b8-e8fa-2ue1
38
vulnerability VCID-nn62-vxhh-zfcs
39
vulnerability VCID-nx86-xnct-afbs
40
vulnerability VCID-p6cz-c9ah-c7cp
41
vulnerability VCID-pntx-wfhx-p3aa
42
vulnerability VCID-qbws-64b9-83fc
43
vulnerability VCID-qpsu-er16-a7dc
44
vulnerability VCID-qtt6-8kf8-1fbt
45
vulnerability VCID-rarq-tdjt-hff3
46
vulnerability VCID-rc9e-eprg-pfdg
47
vulnerability VCID-rgk8-k53p-gkft
48
vulnerability VCID-rnub-zmb6-5yhw
49
vulnerability VCID-s2w1-fedq-ckes
50
vulnerability VCID-sn3p-chty-aqen
51
vulnerability VCID-tfhg-gzz2-7qc5
52
vulnerability VCID-u1pn-s2ug-nucg
53
vulnerability VCID-uvca-5e2n-pqew
54
vulnerability VCID-vtec-237j-1ua2
55
vulnerability VCID-xk7s-y611-mffc
56
vulnerability VCID-xn7b-vz2e-6qdh
57
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@1.0
1
url pkg:pypi/ansible-vault@1.0.0
purl pkg:pypi/ansible-vault@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-49pa-4aeh-uuer
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible-vault@1.0.0
2
url pkg:pypi/ansible-vault@1.0.1
purl pkg:pypi/ansible-vault@1.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-49pa-4aeh-uuer
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible-vault@1.0.1
3
url pkg:pypi/ansible-vault@1.0.2
purl pkg:pypi/ansible-vault@1.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-49pa-4aeh-uuer
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible-vault@1.0.2
4
url pkg:pypi/ansible-vault@1.0.3
purl pkg:pypi/ansible-vault@1.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-49pa-4aeh-uuer
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible-vault@1.0.3
5
url pkg:pypi/ansible-vault@1.0.4
purl pkg:pypi/ansible-vault@1.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-49pa-4aeh-uuer
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible-vault@1.0.4
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-2809
reference_id
reference_type
scores
0
value 0.00465
scoring_system epss
scoring_elements 0.64679
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-2809
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible-vault/PYSEC-2017-5.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible-vault/PYSEC-2017-5.yaml
2
reference_url https://github.com/tomoh1r/ansible-vault
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/tomoh1r/ansible-vault
3
reference_url https://github.com/tomoh1r/ansible-vault/blob/v1.0.5/CHANGES.txt
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/tomoh1r/ansible-vault/blob/v1.0.5/CHANGES.txt
4
reference_url https://github.com/tomoh1r/ansible-vault/commit/3f8f659ef443ab870bb19f95d43543470168ae04
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/tomoh1r/ansible-vault/commit/3f8f659ef443ab870bb19f95d43543470168ae04
5
reference_url https://github.com/tomoh1r/ansible-vault/issues/4
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/tomoh1r/ansible-vault/issues/4
6
reference_url https://web.archive.org/web/20171206173637/http://www.securityfocus.com/bid/100824
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20171206173637/http://www.securityfocus.com/bid/100824
7
reference_url https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0305
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0305
8
reference_url http://www.securityfocus.com/bid/100824
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/100824
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-2809
reference_id CVE-2017-2809
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-2809
10
reference_url https://github.com/advisories/GHSA-c2w9-48qc-qpj4
reference_id GHSA-c2w9-48qc-qpj4
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-c2w9-48qc-qpj4
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 94
name Improper Control of Generation of Code ('Code Injection')
description The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
3
cwe_id 78
name Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
description The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-49pa-4aeh-uuer