Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-r52s-2crw-tfbx
Summarygolang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension
Aliases
0
alias CVE-2020-28851
Fixed_packages
0
url pkg:deb/debian/golang-golang-x-text@0.3.6-1?distro=trixie
purl pkg:deb/debian/golang-golang-x-text@0.3.6-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dh6-y93r-2ucc
1
vulnerability VCID-6rzu-td8d-1ycn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-golang-x-text@0.3.6-1%3Fdistro=trixie
1
url pkg:deb/debian/golang-golang-x-text@0.7.0-1?distro=trixie
purl pkg:deb/debian/golang-golang-x-text@0.7.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-golang-x-text@0.7.0-1%3Fdistro=trixie
2
url pkg:deb/debian/golang-golang-x-text@0.22.0-1?distro=trixie
purl pkg:deb/debian/golang-golang-x-text@0.22.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-golang-x-text@0.22.0-1%3Fdistro=trixie
3
url pkg:deb/debian/golang-golang-x-text@0.35.0-1?distro=trixie
purl pkg:deb/debian/golang-golang-x-text@0.35.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-golang-x-text@0.35.0-1%3Fdistro=trixie
4
url pkg:deb/debian/golang-golang-x-text@0.36.0-1?distro=trixie
purl pkg:deb/debian/golang-golang-x-text@0.36.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-golang-x-text@0.36.0-1%3Fdistro=trixie
Affected_packages
0
url pkg:rpm/redhat/git-lfs@2.13.3-3?arch=el8_6
purl pkg:rpm/redhat/git-lfs@2.13.3-3?arch=el8_6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-498g-zap2-vqag
1
vulnerability VCID-6189-d1tw-bfcp
2
vulnerability VCID-65mk-w8rx-zucs
3
vulnerability VCID-81aw-mk9s-eydd
4
vulnerability VCID-azr4-u36f-pbew
5
vulnerability VCID-g8y7-jdy7-afdh
6
vulnerability VCID-hvfd-h9rm-jkbw
7
vulnerability VCID-ps89-8u5a-kfc8
8
vulnerability VCID-r52s-2crw-tfbx
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/git-lfs@2.13.3-3%3Farch=el8_6
1
url pkg:rpm/redhat/podman@2:4.2.0-3?arch=el9
purl pkg:rpm/redhat/podman@2:4.2.0-3?arch=el9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1n1h-e2p4-9yhs
1
vulnerability VCID-83z3-5q22-wycr
2
vulnerability VCID-ayxa-s9j4-k7hd
3
vulnerability VCID-hvfd-h9rm-jkbw
4
vulnerability VCID-mzjw-b6mh-nugs
5
vulnerability VCID-pqs8-s3dm-7ff2
6
vulnerability VCID-r52s-2crw-tfbx
7
vulnerability VCID-z1ct-cecz-mqer
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/podman@2:4.2.0-3%3Farch=el9
2
url pkg:rpm/redhat/servicemesh@2.0.9-3?arch=el8
purl pkg:rpm/redhat/servicemesh@2.0.9-3?arch=el8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-63v8-dt23-9ue7
1
vulnerability VCID-ad5y-3exv-y7bq
2
vulnerability VCID-esea-tj2b-h7ey
3
vulnerability VCID-hvfd-h9rm-jkbw
4
vulnerability VCID-qn4v-xah4-fya7
5
vulnerability VCID-r52s-2crw-tfbx
6
vulnerability VCID-xref-9byg-nkdw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/servicemesh@2.0.9-3%3Farch=el8
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28851.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28851.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-28851
reference_id
reference_type
scores
0
value 0.00138
scoring_system epss
scoring_elements 0.3356
published_at 2026-04-01T12:55:00Z
1
value 0.00138
scoring_system epss
scoring_elements 0.33894
published_at 2026-04-02T12:55:00Z
2
value 0.00138
scoring_system epss
scoring_elements 0.33926
published_at 2026-04-04T12:55:00Z
3
value 0.00138
scoring_system epss
scoring_elements 0.33779
published_at 2026-04-21T12:55:00Z
4
value 0.00138
scoring_system epss
scoring_elements 0.33822
published_at 2026-04-08T12:55:00Z
5
value 0.00138
scoring_system epss
scoring_elements 0.33855
published_at 2026-04-09T12:55:00Z
6
value 0.00138
scoring_system epss
scoring_elements 0.33853
published_at 2026-04-11T12:55:00Z
7
value 0.00138
scoring_system epss
scoring_elements 0.33811
published_at 2026-04-18T12:55:00Z
8
value 0.00138
scoring_system epss
scoring_elements 0.33787
published_at 2026-04-13T12:55:00Z
9
value 0.00138
scoring_system epss
scoring_elements 0.33825
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-28851
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28851
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28851
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1913333
reference_id 1913333
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1913333
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=980001
reference_id 980001
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=980001
6
reference_url https://access.redhat.com/errata/RHSA-2022:0577
reference_id RHSA-2022:0577
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0577
7
reference_url https://access.redhat.com/errata/RHSA-2022:1276
reference_id RHSA-2022:1276
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1276
8
reference_url https://access.redhat.com/errata/RHSA-2022:1762
reference_id RHSA-2022:1762
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1762
9
reference_url https://access.redhat.com/errata/RHSA-2022:7129
reference_id RHSA-2022:7129
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:7129
10
reference_url https://access.redhat.com/errata/RHSA-2022:7954
reference_id RHSA-2022:7954
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:7954
11
reference_url https://usn.ubuntu.com/5873-1/
reference_id USN-5873-1
reference_type
scores
url https://usn.ubuntu.com/5873-1/
Weaknesses
0
cwe_id 129
name Improper Validation of Array Index
description The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Exploits
Severity_range_score5.3 - 7.5
Exploitability0.5
Weighted_severity6.8
Risk_score3.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-r52s-2crw-tfbx