Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-arjz-geyr-q7e3
Summaryruby: Unsafe parsing of long strings via decode_www_form_component method
Aliases
0
alias CVE-2014-6438
1
alias GHSA-2j3h-55rq-rj48
Fixed_packages
Affected_packages
0
url pkg:rpm/redhat/ruby3-3-main@3.3.10-23.1?arch=hum1
purl pkg:rpm/redhat/ruby3-3-main@3.3.10-23.1?arch=hum1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vp9-6q85-5ffv
1
vulnerability VCID-2sv2-6snv-2bd3
2
vulnerability VCID-4qm3-nbsk-73he
3
vulnerability VCID-4yvc-uzev-wua4
4
vulnerability VCID-5xez-skrj-b3h4
5
vulnerability VCID-91b7-xx8t-rqhr
6
vulnerability VCID-9x9w-2k98-wydm
7
vulnerability VCID-a15m-bcma-vfa7
8
vulnerability VCID-arjz-geyr-q7e3
9
vulnerability VCID-bdar-wgfe-qqgf
10
vulnerability VCID-ea13-mua4-1fb9
11
vulnerability VCID-fw7k-88kf-1kgg
12
vulnerability VCID-g7ju-q41v-wyhd
13
vulnerability VCID-jj3a-fpsa-a7at
14
vulnerability VCID-pegr-f5mh-ekdz
15
vulnerability VCID-qyz5-zmnt-qucy
16
vulnerability VCID-rwak-wvuw-qbcg
17
vulnerability VCID-sf98-mryd-yfb3
18
vulnerability VCID-sfzh-hn56-hbak
19
vulnerability VCID-t9y5-hd9b-bkc4
20
vulnerability VCID-vcz9-dvf4-47am
21
vulnerability VCID-wzdf-d9fv-u3hh
22
vulnerability VCID-x126-x9qm-e7d3
23
vulnerability VCID-xkd6-jvma-skfk
24
vulnerability VCID-y56y-5am7-wkhr
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby3-3-main@3.3.10-23.1%3Farch=hum1
1
url pkg:rpm/redhat/ruby3-4-main@3.4.8-31.1?arch=hum1
purl pkg:rpm/redhat/ruby3-4-main@3.4.8-31.1?arch=hum1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vp9-6q85-5ffv
1
vulnerability VCID-2sv2-6snv-2bd3
2
vulnerability VCID-4qm3-nbsk-73he
3
vulnerability VCID-4yvc-uzev-wua4
4
vulnerability VCID-5xez-skrj-b3h4
5
vulnerability VCID-91b7-xx8t-rqhr
6
vulnerability VCID-9x9w-2k98-wydm
7
vulnerability VCID-a15m-bcma-vfa7
8
vulnerability VCID-arjz-geyr-q7e3
9
vulnerability VCID-bdar-wgfe-qqgf
10
vulnerability VCID-ea13-mua4-1fb9
11
vulnerability VCID-fw7k-88kf-1kgg
12
vulnerability VCID-g7ju-q41v-wyhd
13
vulnerability VCID-jj3a-fpsa-a7at
14
vulnerability VCID-pegr-f5mh-ekdz
15
vulnerability VCID-qyz5-zmnt-qucy
16
vulnerability VCID-rwak-wvuw-qbcg
17
vulnerability VCID-sf98-mryd-yfb3
18
vulnerability VCID-sfzh-hn56-hbak
19
vulnerability VCID-t9y5-hd9b-bkc4
20
vulnerability VCID-vcz9-dvf4-47am
21
vulnerability VCID-wzdf-d9fv-u3hh
22
vulnerability VCID-x126-x9qm-e7d3
23
vulnerability VCID-xkd6-jvma-skfk
24
vulnerability VCID-y56y-5am7-wkhr
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby3-4-main@3.4.8-31.1%3Farch=hum1
2
url pkg:rpm/redhat/ruby4-0-main@4.0.0-33.3?arch=hum1
purl pkg:rpm/redhat/ruby4-0-main@4.0.0-33.3?arch=hum1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vp9-6q85-5ffv
1
vulnerability VCID-2sv2-6snv-2bd3
2
vulnerability VCID-4qm3-nbsk-73he
3
vulnerability VCID-4yvc-uzev-wua4
4
vulnerability VCID-5xez-skrj-b3h4
5
vulnerability VCID-91b7-xx8t-rqhr
6
vulnerability VCID-9x9w-2k98-wydm
7
vulnerability VCID-a15m-bcma-vfa7
8
vulnerability VCID-arjz-geyr-q7e3
9
vulnerability VCID-bdar-wgfe-qqgf
10
vulnerability VCID-ea13-mua4-1fb9
11
vulnerability VCID-fw7k-88kf-1kgg
12
vulnerability VCID-g7ju-q41v-wyhd
13
vulnerability VCID-jj3a-fpsa-a7at
14
vulnerability VCID-pegr-f5mh-ekdz
15
vulnerability VCID-qyz5-zmnt-qucy
16
vulnerability VCID-rwak-wvuw-qbcg
17
vulnerability VCID-sf98-mryd-yfb3
18
vulnerability VCID-sfzh-hn56-hbak
19
vulnerability VCID-t9y5-hd9b-bkc4
20
vulnerability VCID-vcz9-dvf4-47am
21
vulnerability VCID-wzdf-d9fv-u3hh
22
vulnerability VCID-x126-x9qm-e7d3
23
vulnerability VCID-xkd6-jvma-skfk
24
vulnerability VCID-y56y-5am7-wkhr
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby4-0-main@4.0.0-33.3%3Farch=hum1
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6438.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6438.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-6438
reference_id
reference_type
scores
0
value 0.01127
scoring_system epss
scoring_elements 0.78237
published_at 2026-04-01T12:55:00Z
1
value 0.01127
scoring_system epss
scoring_elements 0.78245
published_at 2026-04-02T12:55:00Z
2
value 0.01127
scoring_system epss
scoring_elements 0.78276
published_at 2026-04-04T12:55:00Z
3
value 0.01127
scoring_system epss
scoring_elements 0.78258
published_at 2026-04-07T12:55:00Z
4
value 0.01127
scoring_system epss
scoring_elements 0.78284
published_at 2026-04-08T12:55:00Z
5
value 0.01127
scoring_system epss
scoring_elements 0.7829
published_at 2026-04-09T12:55:00Z
6
value 0.01127
scoring_system epss
scoring_elements 0.78316
published_at 2026-04-11T12:55:00Z
7
value 0.01127
scoring_system epss
scoring_elements 0.78298
published_at 2026-04-12T12:55:00Z
8
value 0.01127
scoring_system epss
scoring_elements 0.78294
published_at 2026-04-13T12:55:00Z
9
value 0.01127
scoring_system epss
scoring_elements 0.78323
published_at 2026-04-16T12:55:00Z
10
value 0.01127
scoring_system epss
scoring_elements 0.78321
published_at 2026-04-18T12:55:00Z
11
value 0.01127
scoring_system epss
scoring_elements 0.78317
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-6438
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-6438
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-6438
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1490845
reference_id 1490845
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1490845
4
reference_url https://access.redhat.com/errata/RHSA-2026:7305
reference_id RHSA-2026:7305
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:7305
5
reference_url https://access.redhat.com/errata/RHSA-2026:7307
reference_id RHSA-2026:7307
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:7307
6
reference_url https://access.redhat.com/errata/RHSA-2026:8838
reference_id RHSA-2026:8838
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:8838
Weaknesses
0
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Exploits
Severity_range_score7.5 - 7.5
Exploitability0.5
Weighted_severity6.8
Risk_score3.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-arjz-geyr-q7e3