Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/8709?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8709?format=api", "vulnerability_id": "VCID-psgc-3nmf-xkfj", "summary": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.", "aliases": [ { "alias": "CVE-2023-23931" }, { "alias": "GHSA-w7pp-m8wf-vj6r" }, { "alias": "PYSEC-2023-11" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/283231?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=aarch64&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=aarch64&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/355142?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=aarch64&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=aarch64&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/227895?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=aarch64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=aarch64&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/407371?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=aarch64&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=aarch64&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/342595?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=aarch64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=aarch64&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/402946?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=aarch64&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=aarch64&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/283232?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=armhf&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=armhf&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/355143?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=armhf&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=armhf&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/227896?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=armhf&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=armhf&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/407372?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=armhf&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=armhf&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/342596?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=armhf&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=armhf&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/402947?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=armhf&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=armhf&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/283233?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=armv7&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=armv7&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/355144?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=armv7&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=armv7&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/227897?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=armv7&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/407373?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=armv7&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=armv7&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/342597?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=armv7&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=armv7&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/402948?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=armv7&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=armv7&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/283234?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=loongarch64&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=loongarch64&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/407374?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=loongarch64&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=loongarch64&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/342598?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=loongarch64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=loongarch64&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/402949?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=loongarch64&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=loongarch64&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/283235?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=ppc64le&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=ppc64le&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/355145?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=ppc64le&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=ppc64le&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/227898?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=ppc64le&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=ppc64le&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/407375?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=ppc64le&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=ppc64le&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/342599?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=ppc64le&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=ppc64le&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/402950?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=ppc64le&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=ppc64le&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/283236?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=riscv64&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=riscv64&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/407376?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=riscv64&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=riscv64&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/342600?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/402951?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=riscv64&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=riscv64&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/283237?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=s390x&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=s390x&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/355146?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=s390x&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=s390x&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/227899?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=s390x&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=s390x&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/407377?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=s390x&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=s390x&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/342601?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=s390x&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=s390x&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/402952?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=s390x&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=s390x&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/283239?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=x86_64&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=x86_64&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/355148?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=x86_64&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=x86_64&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/227901?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=x86_64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=x86_64&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/407379?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=x86_64&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=x86_64&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/342603?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=x86_64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=x86_64&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/402954?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=x86_64&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=x86_64&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/283238?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=x86&distroversion=edge&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=x86&distroversion=edge&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/355147?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=x86&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=x86&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/227900?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=x86&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=x86&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/407378?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=x86&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=x86&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/342602?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=x86&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=x86&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/402953?format=api", "purl": "pkg:apk/alpine/py3-cryptography@39.0.1-r0?arch=x86&distroversion=v3.23&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-cryptography@39.0.1-r0%3Farch=x86&distroversion=v3.23&reponame=main" }, { "url": "http://public2.vulnerablecode.io/api/packages/203774?format=api", "purl": "pkg:deb/debian/python-cryptography@3.3.2-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2n3b-ghpm-s3fb" }, { "vulnerability": "VCID-n45m-e281-97ar" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@3.3.2-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/203780?format=api", "purl": "pkg:deb/debian/python-cryptography@3.3.2-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@3.3.2-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/203779?format=api", "purl": "pkg:deb/debian/python-cryptography@38.0.4-3?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@38.0.4-3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/203772?format=api", "purl": "pkg:deb/debian/python-cryptography@38.0.4-3%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2n3b-ghpm-s3fb" }, { "vulnerability": "VCID-n45m-e281-97ar" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@38.0.4-3%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/203776?format=api", "purl": "pkg:deb/debian/python-cryptography@43.0.0-3%2Bdeb13u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@43.0.0-3%252Bdeb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/203775?format=api", "purl": "pkg:deb/debian/python-cryptography@46.0.7-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-cryptography@46.0.7-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/176164?format=api", "purl": "pkg:ebuild/dev-python/cryptography@42.0.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-python/cryptography@42.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/30231?format=api", "purl": "pkg:pypi/cryptography@39.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-wegt-2wzm-euhw" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@39.0.1" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/18468?format=api", "purl": "pkg:pypi/cryptography@1.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/18469?format=api", "purl": "pkg:pypi/cryptography@1.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18470?format=api", "purl": "pkg:pypi/cryptography@1.8.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.8.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/10440?format=api", "purl": "pkg:pypi/cryptography@1.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-kybb-mt3g-vfef" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@1.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/10441?format=api", "purl": "pkg:pypi/cryptography@2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-kybb-mt3g-vfef" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/10442?format=api", "purl": "pkg:pypi/cryptography@2.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-kybb-mt3g-vfef" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/10443?format=api", "purl": "pkg:pypi/cryptography@2.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-kybb-mt3g-vfef" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/10444?format=api", "purl": "pkg:pypi/cryptography@2.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-kybb-mt3g-vfef" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10445?format=api", "purl": "pkg:pypi/cryptography@2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-kybb-mt3g-vfef" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/10446?format=api", "purl": "pkg:pypi/cryptography@2.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-kybb-mt3g-vfef" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/10447?format=api", "purl": "pkg:pypi/cryptography@2.1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-kybb-mt3g-vfef" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/10448?format=api", "purl": "pkg:pypi/cryptography@2.1.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-kybb-mt3g-vfef" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.1.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10449?format=api", "purl": "pkg:pypi/cryptography@2.1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-kybb-mt3g-vfef" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.1.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/10450?format=api", "purl": "pkg:pypi/cryptography@2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-kybb-mt3g-vfef" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/10451?format=api", "purl": "pkg:pypi/cryptography@2.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-kybb-mt3g-vfef" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/10452?format=api", "purl": "pkg:pypi/cryptography@2.2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-kybb-mt3g-vfef" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.2.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/10453?format=api", "purl": "pkg:pypi/cryptography@2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/18471?format=api", "purl": "pkg:pypi/cryptography@2.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18472?format=api", "purl": "pkg:pypi/cryptography@2.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/18473?format=api", "purl": "pkg:pypi/cryptography@2.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18474?format=api", "purl": "pkg:pypi/cryptography@2.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.4.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/18475?format=api", "purl": "pkg:pypi/cryptography@2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-6yx5-ejqy-gbce" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/18476?format=api", "purl": "pkg:pypi/cryptography@2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/18477?format=api", "purl": "pkg:pypi/cryptography@2.6.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.6.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18478?format=api", "purl": "pkg:pypi/cryptography@2.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/18479?format=api", "purl": "pkg:pypi/cryptography@2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/18480?format=api", "purl": "pkg:pypi/cryptography@2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/18481?format=api", "purl": "pkg:pypi/cryptography@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.9.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18482?format=api", "purl": "pkg:pypi/cryptography@2.9.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@2.9.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/18483?format=api", "purl": "pkg:pypi/cryptography@3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/18484?format=api", "purl": "pkg:pypi/cryptography@3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-ecjs-cgct-4yh2" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18485?format=api", "purl": "pkg:pypi/cryptography@3.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-ecjs-cgct-4yh2" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18486?format=api", "purl": "pkg:pypi/cryptography@3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4yhp-yntd-jugg" }, { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-ecjs-cgct-4yh2" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/18487?format=api", "purl": "pkg:pypi/cryptography@3.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-ecjs-cgct-4yh2" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18641?format=api", "purl": "pkg:pypi/cryptography@3.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-ecjs-cgct-4yh2" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/18642?format=api", "purl": "pkg:pypi/cryptography@3.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-ecjs-cgct-4yh2" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18643?format=api", "purl": "pkg:pypi/cryptography@3.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.3.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/30207?format=api", "purl": "pkg:pypi/cryptography@3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/30208?format=api", "purl": "pkg:pypi/cryptography@3.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/30209?format=api", "purl": "pkg:pypi/cryptography@3.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.4.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/30210?format=api", "purl": "pkg:pypi/cryptography@3.4.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.4.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/30211?format=api", "purl": "pkg:pypi/cryptography@3.4.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.4.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/30212?format=api", "purl": "pkg:pypi/cryptography@3.4.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.4.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/30213?format=api", "purl": "pkg:pypi/cryptography@3.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.4.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/30214?format=api", "purl": "pkg:pypi/cryptography@3.4.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.4.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/30215?format=api", "purl": "pkg:pypi/cryptography@3.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@3.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/30216?format=api", "purl": "pkg:pypi/cryptography@35.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@35.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/30217?format=api", "purl": "pkg:pypi/cryptography@36.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@36.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/30218?format=api", "purl": "pkg:pypi/cryptography@36.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@36.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/30219?format=api", "purl": "pkg:pypi/cryptography@36.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@36.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/30220?format=api", "purl": "pkg:pypi/cryptography@37.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4ut8-4vzr-2ue6" }, { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-rtu1-e9yg-97cx" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@37.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/30221?format=api", "purl": "pkg:pypi/cryptography@37.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@37.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/30222?format=api", "purl": "pkg:pypi/cryptography@37.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@37.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/30223?format=api", "purl": "pkg:pypi/cryptography@37.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@37.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/30224?format=api", "purl": "pkg:pypi/cryptography@37.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@37.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/30225?format=api", "purl": "pkg:pypi/cryptography@38.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wegt-2wzm-euhw" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@38.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/30226?format=api", "purl": "pkg:pypi/cryptography@38.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wegt-2wzm-euhw" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@38.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/30227?format=api", "purl": "pkg:pypi/cryptography@38.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wegt-2wzm-euhw" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@38.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/30228?format=api", "purl": "pkg:pypi/cryptography@38.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wegt-2wzm-euhw" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@38.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/30229?format=api", "purl": "pkg:pypi/cryptography@38.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wegt-2wzm-euhw" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@38.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/30230?format=api", "purl": "pkg:pypi/cryptography@39.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cyf1-6j45-x3b4" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" }, { "vulnerability": "VCID-wegt-2wzm-euhw" }, { "vulnerability": "VCID-wu6a-6z5z-zuba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/cryptography@39.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/149654?format=api", "purl": "pkg:rpm/redhat/automation-controller@4.4.3-1?arch=el8ap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6ec4-4gm2-kbdg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/automation-controller@4.4.3-1%3Farch=el8ap" }, { "url": "http://public2.vulnerablecode.io/api/packages/149656?format=api", "purl": "pkg:rpm/redhat/automation-controller@4.4.3-1?arch=el9ap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6ec4-4gm2-kbdg" }, { "vulnerability": "VCID-psgc-3nmf-xkfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/automation-controller@4.4.3-1%3Farch=el9ap" }, { "url": "http://public2.vulnerablecode.io/api/packages/154339?format=api", "purl": "pkg:rpm/redhat/python3x-cryptography@38.0.4-2?arch=el8ap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-psgc-3nmf-xkfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python3x-cryptography@38.0.4-2%3Farch=el8ap" }, { "url": "http://public2.vulnerablecode.io/api/packages/154337?format=api", "purl": "pkg:rpm/redhat/python-cryptography@3.2.1-6?arch=el8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-psgc-3nmf-xkfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-cryptography@3.2.1-6%3Farch=el8" }, { "url": "http://public2.vulnerablecode.io/api/packages/154335?format=api", "purl": "pkg:rpm/redhat/python-cryptography@36.0.1-4?arch=el9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-psgc-3nmf-xkfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-cryptography@36.0.1-4%3Farch=el9" }, { "url": "http://public2.vulnerablecode.io/api/packages/154336?format=api", "purl": "pkg:rpm/redhat/python-cryptography@38.0.4-2?arch=el9ap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-psgc-3nmf-xkfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-cryptography@38.0.4-2%3Farch=el9ap" }, { "url": "http://public2.vulnerablecode.io/api/packages/154338?format=api", "purl": "pkg:rpm/redhat/rh-python38-python-cryptography@2.8-6?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-psgc-3nmf-xkfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-python38-python-cryptography@2.8-6%3Farch=el7" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-23931.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-23931.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-23931", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00688", "scoring_system": "epss", "scoring_elements": "0.72061", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-23931" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pyca/cryptography", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pyca/cryptography" }, { "reference_url": "https://github.com/pyca/cryptography/commit/d6951dca25de45abd52da51b608055371fbcde4e", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pyca/cryptography/commit/d6951dca25de45abd52da51b608055371fbcde4e" }, { "reference_url": "https://github.com/pyca/cryptography/pull/8230", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pyca/cryptography/pull/8230" }, { "reference_url": "https://github.com/pyca/cryptography/pull/8230/commits/94a50a9731f35405f0357fa5f3b177d46a726ab3", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:11Z/" } ], "url": "https://github.com/pyca/cryptography/pull/8230/commits/94a50a9731f35405f0357fa5f3b177d46a726ab3" }, { "reference_url": "https://github.com/pyca/cryptography/security/advisories/GHSA-w7pp-m8wf-vj6r", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:11Z/" } ], "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-w7pp-m8wf-vj6r" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2023-11.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2023-11.yaml" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00012.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00012.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20230324-0007", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20230324-0007" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031049", "reference_id": "1031049", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031049" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2171817", "reference_id": "2171817", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2171817" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23931", "reference_id": "CVE-2023-23931", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23931" }, { "reference_url": "https://github.com/advisories/GHSA-w7pp-m8wf-vj6r", "reference_id": "GHSA-w7pp-m8wf-vj6r", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-w7pp-m8wf-vj6r" }, { "reference_url": "https://security.gentoo.org/glsa/202407-06", "reference_id": "GLSA-202407-06", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202407-06" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4693", "reference_id": "RHSA-2023:4693", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4693" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4971", "reference_id": "RHSA-2023:4971", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4971" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:6615", "reference_id": "RHSA-2023:6615", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:6615" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:6793", "reference_id": "RHSA-2023:6793", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:6793" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7096", "reference_id": "RHSA-2023:7096", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7096" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7341", "reference_id": "RHSA-2023:7341", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7341" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2985", "reference_id": "RHSA-2024:2985", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2985" }, { "reference_url": "https://usn.ubuntu.com/6539-1/", "reference_id": "USN-6539-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6539-1/" } ], "weaknesses": [ { "cwe_id": 754, "name": "Improper Check for Unusual or Exceptional Conditions", "description": "The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." } ], "exploits": [], "severity_range_score": "4.0 - 6.9", "exploitability": "0.5", "weighted_severity": "5.9", "risk_score": 3.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-psgc-3nmf-xkfj" }