Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-kk6t-e2zm-5bck
SummaryBotan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value (C3) failed to check that the encoded value was of the expected length prior to comparison. An invalid ciphertext can cause a heap over-read of up to 31 bytes, resulting in a crash or potentially other undefined behavior. This issue has been patched in version 3.11.0.
Aliases
0
alias CVE-2026-32877
Fixed_packages
0
url pkg:apk/alpine/botan3@3.11.0-r0?arch=aarch64&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=aarch64&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=aarch64&distroversion=v3.24&reponame=main
1
url pkg:apk/alpine/botan3@3.11.0-r0?arch=armhf&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=armhf&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=armhf&distroversion=v3.24&reponame=main
2
url pkg:apk/alpine/botan3@3.11.0-r0?arch=armv7&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=armv7&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=armv7&distroversion=v3.24&reponame=main
3
url pkg:apk/alpine/botan3@3.11.0-r0?arch=loongarch64&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=loongarch64&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=loongarch64&distroversion=v3.24&reponame=main
4
url pkg:apk/alpine/botan3@3.11.0-r0?arch=ppc64le&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=ppc64le&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=ppc64le&distroversion=v3.24&reponame=main
5
url pkg:apk/alpine/botan3@3.11.0-r0?arch=riscv64&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=riscv64&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=riscv64&distroversion=v3.24&reponame=main
6
url pkg:apk/alpine/botan3@3.11.0-r0?arch=s390x&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=s390x&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=s390x&distroversion=v3.24&reponame=main
7
url pkg:apk/alpine/botan3@3.11.0-r0?arch=x86&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=x86&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=x86&distroversion=v3.24&reponame=main
8
url pkg:apk/alpine/botan3@3.11.0-r0?arch=x86_64&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=x86_64&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=x86_64&distroversion=v3.24&reponame=main
9
url pkg:apk/alpine/botan3@3.11.0-r0?arch=aarch64&distroversion=edge&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=aarch64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=aarch64&distroversion=edge&reponame=main
10
url pkg:apk/alpine/botan3@3.11.0-r0?arch=armhf&distroversion=edge&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=armhf&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=armhf&distroversion=edge&reponame=main
11
url pkg:apk/alpine/botan3@3.11.0-r0?arch=armv7&distroversion=edge&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=armv7&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=armv7&distroversion=edge&reponame=main
12
url pkg:apk/alpine/botan3@3.11.0-r0?arch=loongarch64&distroversion=edge&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=loongarch64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=loongarch64&distroversion=edge&reponame=main
13
url pkg:apk/alpine/botan3@3.11.0-r0?arch=ppc64le&distroversion=edge&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=ppc64le&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=ppc64le&distroversion=edge&reponame=main
14
url pkg:apk/alpine/botan3@3.11.0-r0?arch=riscv64&distroversion=edge&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=riscv64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=riscv64&distroversion=edge&reponame=main
15
url pkg:apk/alpine/botan3@3.11.0-r0?arch=s390x&distroversion=edge&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=s390x&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=s390x&distroversion=edge&reponame=main
16
url pkg:apk/alpine/botan3@3.11.0-r0?arch=x86&distroversion=edge&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=x86&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=x86&distroversion=edge&reponame=main
17
url pkg:apk/alpine/botan3@3.11.0-r0?arch=x86_64&distroversion=edge&reponame=main
purl pkg:apk/alpine/botan3@3.11.0-r0?arch=x86_64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/botan3@3.11.0-r0%3Farch=x86_64&distroversion=edge&reponame=main
18
url pkg:deb/debian/botan3@3.11.0%2Bdfsg-2?distro=trixie
purl pkg:deb/debian/botan3@3.11.0%2Bdfsg-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/botan3@3.11.0%252Bdfsg-2%3Fdistro=trixie
19
url pkg:deb/debian/botan3@3.12.0%2Bdfsg-2?distro=trixie
purl pkg:deb/debian/botan3@3.12.0%2Bdfsg-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/botan3@3.12.0%252Bdfsg-2%3Fdistro=trixie
20
url pkg:deb/debian/botan3@3.12.0%2Bdfsg-2
purl pkg:deb/debian/botan3@3.12.0%2Bdfsg-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/botan3@3.12.0%252Bdfsg-2
Affected_packages
0
url pkg:deb/debian/botan3@3.7.1%2Bdfsg-2?distro=trixie
purl pkg:deb/debian/botan3@3.7.1%2Bdfsg-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2tn7-1mpw-n3gn
1
vulnerability VCID-h2rp-935z-gkbf
2
vulnerability VCID-kk6t-e2zm-5bck
3
vulnerability VCID-m4uz-wud7-3bf2
4
vulnerability VCID-twnz-2bvd-a7f5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/botan3@3.7.1%252Bdfsg-2%3Fdistro=trixie
1
url pkg:deb/debian/botan3@3.7.1%2Bdfsg-2
purl pkg:deb/debian/botan3@3.7.1%2Bdfsg-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2tn7-1mpw-n3gn
1
vulnerability VCID-h2rp-935z-gkbf
2
vulnerability VCID-kk6t-e2zm-5bck
3
vulnerability VCID-m4uz-wud7-3bf2
4
vulnerability VCID-twnz-2bvd-a7f5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/botan3@3.7.1%252Bdfsg-2
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-32877.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-32877.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-32877
reference_id
reference_type
scores
0
value 0.00063
scoring_system epss
scoring_elements 0.19873
published_at 2026-06-11T12:55:00Z
1
value 0.00063
scoring_system epss
scoring_elements 0.20045
published_at 2026-06-12T12:55:00Z
2
value 0.00063
scoring_system epss
scoring_elements 0.20065
published_at 2026-06-13T12:55:00Z
3
value 0.00063
scoring_system epss
scoring_elements 0.20039
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-32877
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32877
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32877
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2453209
reference_id 2453209
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2453209
4
reference_url https://github.com/randombit/botan/security/advisories/GHSA-7jj6-4r42-w9h6
reference_id GHSA-7jj6-4r42-w9h6
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-31T15:25:50Z/
url https://github.com/randombit/botan/security/advisories/GHSA-7jj6-4r42-w9h6
Weaknesses
0
cwe_id 125
name Out-of-bounds Read
description The product reads data past the end, or before the beginning, of the intended buffer.
1
cwe_id 1284
name Improper Validation of Specified Quantity in Input
description The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
Exploits
Severity_range_score6.5 - 8.2
Exploitability0.5
Weighted_severity7.4
Risk_score3.7
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-kk6t-e2zm-5bck