Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-s6cp-dk5r-v3aw

Summary

Information Exposure
The package sprockets may leak confidential information. Specially crafted requests can be used to access files that exist on the filesystem that are outside an application's root directory when the server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately.

Aliases

alias	CVE-2018-3760

alias	GHSA-pr3h-jjhj-573x

Fixed_packages

url pkg:deb/debian/ruby-sprockets@3.7.0-1%2Bdeb9u1

purl pkg:deb/debian/ruby-sprockets@3.7.0-1%2Bdeb9u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-sprockets@3.7.0-1%252Bdeb9u1

url	pkg:deb/debian/ruby-sprockets@3.7.0-1.1?distro=trixie
purl	pkg:deb/debian/ruby-sprockets@3.7.0-1.1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-sprockets@3.7.0-1.1%3Fdistro=trixie

url	pkg:deb/debian/ruby-sprockets@3.7.2-1?distro=trixie
purl	pkg:deb/debian/ruby-sprockets@3.7.2-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-sprockets@3.7.2-1%3Fdistro=trixie

url	pkg:deb/debian/ruby-sprockets@3.7.2-1
purl	pkg:deb/debian/ruby-sprockets@3.7.2-1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-sprockets@3.7.2-1

url	pkg:deb/debian/ruby-sprockets@3.7.2-4?distro=trixie
purl	pkg:deb/debian/ruby-sprockets@3.7.2-4?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-sprockets@3.7.2-4%3Fdistro=trixie

url	pkg:deb/debian/ruby-sprockets@4.2.1-3?distro=trixie
purl	pkg:deb/debian/ruby-sprockets@4.2.1-3?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-sprockets@4.2.1-3%3Fdistro=trixie

url	pkg:deb/debian/ruby-sprockets@4.2.2-1?distro=trixie
purl	pkg:deb/debian/ruby-sprockets@4.2.2-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-sprockets@4.2.2-1%3Fdistro=trixie

url	pkg:gem/sprockets@2.12.5
purl	pkg:gem/sprockets@2.12.5
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.12.5

url	pkg:gem/sprockets@3.7.2
purl	pkg:gem/sprockets@3.7.2
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.7.2

url	pkg:gem/sprockets@4.0.0.beta8
purl	pkg:gem/sprockets@4.0.0.beta8
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@4.0.0.beta8

Affected_packages

url pkg:deb/debian/ruby-sprockets@2.4.3-1

purl pkg:deb/debian/ruby-sprockets@2.4.3-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-sprockets@2.4.3-1

url pkg:deb/debian/ruby-sprockets@2.12.3-1

purl pkg:deb/debian/ruby-sprockets@2.12.3-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-sprockets@2.12.3-1

url pkg:deb/debian/ruby-sprockets@3.7.0-1%2Bdeb9u1

purl pkg:deb/debian/ruby-sprockets@3.7.0-1%2Bdeb9u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby-sprockets@3.7.0-1%252Bdeb9u1

url pkg:gem/sprockets@0.9.0

purl pkg:gem/sprockets@0.9.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@0.9.0

url pkg:gem/sprockets@0.9.1

purl pkg:gem/sprockets@0.9.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@0.9.1

url pkg:gem/sprockets@1.0.0

purl pkg:gem/sprockets@1.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@1.0.0

url pkg:gem/sprockets@1.0.1

purl pkg:gem/sprockets@1.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@1.0.1

url pkg:gem/sprockets@1.0.2

purl pkg:gem/sprockets@1.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@1.0.2

url pkg:gem/sprockets@2.0.0

purl pkg:gem/sprockets@2.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.0.0

url pkg:gem/sprockets@2.0.1

purl pkg:gem/sprockets@2.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.0.1

url pkg:gem/sprockets@2.0.2

purl pkg:gem/sprockets@2.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.0.2

url pkg:gem/sprockets@2.0.3

purl pkg:gem/sprockets@2.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.0.3

url pkg:gem/sprockets@2.0.4

purl pkg:gem/sprockets@2.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.0.4

url pkg:gem/sprockets@2.0.5

purl pkg:gem/sprockets@2.0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.0.5

url pkg:gem/sprockets@2.1.0.beta

purl pkg:gem/sprockets@2.1.0.beta

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.1.0.beta

url pkg:gem/sprockets@2.1.0

purl pkg:gem/sprockets@2.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.1.0

url pkg:gem/sprockets@2.1.1

purl pkg:gem/sprockets@2.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.1.1

url pkg:gem/sprockets@2.1.2

purl pkg:gem/sprockets@2.1.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.1.2

url pkg:gem/sprockets@2.1.3

purl pkg:gem/sprockets@2.1.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.1.3

url pkg:gem/sprockets@2.1.4

purl pkg:gem/sprockets@2.1.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.1.4

url pkg:gem/sprockets@2.2.0.beta

purl pkg:gem/sprockets@2.2.0.beta

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.2.0.beta

url pkg:gem/sprockets@2.2.0

purl pkg:gem/sprockets@2.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.2.0

url pkg:gem/sprockets@2.2.1

purl pkg:gem/sprockets@2.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.2.1

url pkg:gem/sprockets@2.2.2

purl pkg:gem/sprockets@2.2.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.2.2

url pkg:gem/sprockets@2.2.3

purl pkg:gem/sprockets@2.2.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.2.3

url pkg:gem/sprockets@2.3.0.beta

purl pkg:gem/sprockets@2.3.0.beta

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.3.0.beta

url pkg:gem/sprockets@2.3.0

purl pkg:gem/sprockets@2.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.3.0

url pkg:gem/sprockets@2.3.1

purl pkg:gem/sprockets@2.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.3.1

url pkg:gem/sprockets@2.3.2

purl pkg:gem/sprockets@2.3.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.3.2

url pkg:gem/sprockets@2.3.3

purl pkg:gem/sprockets@2.3.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.3.3

url pkg:gem/sprockets@2.4.0

purl pkg:gem/sprockets@2.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.4.0

url pkg:gem/sprockets@2.4.1

purl pkg:gem/sprockets@2.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.4.1

url pkg:gem/sprockets@2.4.2

purl pkg:gem/sprockets@2.4.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.4.2

url pkg:gem/sprockets@2.4.3

purl pkg:gem/sprockets@2.4.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.4.3

url pkg:gem/sprockets@2.4.4

purl pkg:gem/sprockets@2.4.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.4.4

url pkg:gem/sprockets@2.4.5

purl pkg:gem/sprockets@2.4.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.4.5

url pkg:gem/sprockets@2.4.6

purl pkg:gem/sprockets@2.4.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.4.6

url pkg:gem/sprockets@2.5.0

purl pkg:gem/sprockets@2.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.5.0

url pkg:gem/sprockets@2.5.1

purl pkg:gem/sprockets@2.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.5.1

url pkg:gem/sprockets@2.6.0

purl pkg:gem/sprockets@2.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.6.0

url pkg:gem/sprockets@2.6.1

purl pkg:gem/sprockets@2.6.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.6.1

url pkg:gem/sprockets@2.7.0

purl pkg:gem/sprockets@2.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.7.0

url pkg:gem/sprockets@2.7.1

purl pkg:gem/sprockets@2.7.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.7.1

url pkg:gem/sprockets@2.8.0

purl pkg:gem/sprockets@2.8.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.8.0

url pkg:gem/sprockets@2.8.1

purl pkg:gem/sprockets@2.8.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.8.1

url pkg:gem/sprockets@2.8.2

purl pkg:gem/sprockets@2.8.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.8.2

url pkg:gem/sprockets@2.8.3

purl pkg:gem/sprockets@2.8.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.8.3

url pkg:gem/sprockets@2.9.0

purl pkg:gem/sprockets@2.9.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.9.0

url pkg:gem/sprockets@2.9.2

purl pkg:gem/sprockets@2.9.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.9.2

url pkg:gem/sprockets@2.9.3

purl pkg:gem/sprockets@2.9.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.9.3

url pkg:gem/sprockets@2.9.4

purl pkg:gem/sprockets@2.9.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.9.4

url pkg:gem/sprockets@2.10.0

purl pkg:gem/sprockets@2.10.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.10.0

url pkg:gem/sprockets@2.10.1

purl pkg:gem/sprockets@2.10.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.10.1

url pkg:gem/sprockets@2.10.2

purl pkg:gem/sprockets@2.10.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.10.2

url pkg:gem/sprockets@2.11.0

purl pkg:gem/sprockets@2.11.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.11.0

url pkg:gem/sprockets@2.11.3

purl pkg:gem/sprockets@2.11.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.11.3

url pkg:gem/sprockets@2.12.0

purl pkg:gem/sprockets@2.12.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.12.0

url pkg:gem/sprockets@2.12.1

purl pkg:gem/sprockets@2.12.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.12.1

url pkg:gem/sprockets@2.12.2

purl pkg:gem/sprockets@2.12.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-daww-8648-tqax

vulnerability	VCID-g8de-56gr-37cf

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.12.2

url pkg:gem/sprockets@2.12.3

purl pkg:gem/sprockets@2.12.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.12.3

url pkg:gem/sprockets@2.12.4

purl pkg:gem/sprockets@2.12.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@2.12.4

url pkg:gem/sprockets@3.0.0

purl pkg:gem/sprockets@3.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.0.0

url pkg:gem/sprockets@3.0.1

purl pkg:gem/sprockets@3.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.0.1

url pkg:gem/sprockets@3.0.2

purl pkg:gem/sprockets@3.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.0.2

url pkg:gem/sprockets@3.0.3

purl pkg:gem/sprockets@3.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.0.3

url pkg:gem/sprockets@3.1.0

purl pkg:gem/sprockets@3.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.1.0

url pkg:gem/sprockets@3.2.0

purl pkg:gem/sprockets@3.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.2.0

url pkg:gem/sprockets@3.3.0

purl pkg:gem/sprockets@3.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.3.0

url pkg:gem/sprockets@3.3.1

purl pkg:gem/sprockets@3.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.3.1

url pkg:gem/sprockets@3.3.2

purl pkg:gem/sprockets@3.3.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.3.2

url pkg:gem/sprockets@3.3.3

purl pkg:gem/sprockets@3.3.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.3.3

url pkg:gem/sprockets@3.3.4

purl pkg:gem/sprockets@3.3.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.3.4

url pkg:gem/sprockets@3.3.5

purl pkg:gem/sprockets@3.3.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.3.5

url pkg:gem/sprockets@3.4.0

purl pkg:gem/sprockets@3.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.4.0

url pkg:gem/sprockets@3.4.1

purl pkg:gem/sprockets@3.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.4.1

url pkg:gem/sprockets@3.5.0

purl pkg:gem/sprockets@3.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.5.0

url pkg:gem/sprockets@3.5.1

purl pkg:gem/sprockets@3.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.5.1

url pkg:gem/sprockets@3.5.2

purl pkg:gem/sprockets@3.5.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.5.2

url pkg:gem/sprockets@3.6.0

purl pkg:gem/sprockets@3.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.6.0

url pkg:gem/sprockets@3.6.1

purl pkg:gem/sprockets@3.6.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.6.1

url pkg:gem/sprockets@3.6.2

purl pkg:gem/sprockets@3.6.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.6.2

url pkg:gem/sprockets@3.6.3

purl pkg:gem/sprockets@3.6.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.6.3

url pkg:gem/sprockets@3.7.0

purl pkg:gem/sprockets@3.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.7.0

url pkg:gem/sprockets@3.7.1

purl pkg:gem/sprockets@3.7.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@3.7.1

url pkg:gem/sprockets@4.0.0.beta1

purl pkg:gem/sprockets@4.0.0.beta1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@4.0.0.beta1

url pkg:gem/sprockets@4.0.0.beta2

purl pkg:gem/sprockets@4.0.0.beta2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@4.0.0.beta2

url pkg:gem/sprockets@4.0.0.beta3

purl pkg:gem/sprockets@4.0.0.beta3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@4.0.0.beta3

url pkg:gem/sprockets@4.0.0.beta4

purl pkg:gem/sprockets@4.0.0.beta4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@4.0.0.beta4

url pkg:gem/sprockets@4.0.0.beta5

purl pkg:gem/sprockets@4.0.0.beta5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@4.0.0.beta5

url pkg:gem/sprockets@4.0.0.beta6

purl pkg:gem/sprockets@4.0.0.beta6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@4.0.0.beta6

url pkg:gem/sprockets@4.0.0.beta7

purl pkg:gem/sprockets@4.0.0.beta7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@4.0.0.beta7

url pkg:gem/sprockets@4.0.0

purl pkg:gem/sprockets@4.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/sprockets@4.0.0

url pkg:rpm/redhat/ansible-tower@3.1.8-1?arch=el7at

purl pkg:rpm/redhat/ansible-tower@3.1.8-1?arch=el7at

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-q4bk-1qay-ffbh

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ansible-tower@3.1.8-1%3Farch=el7at

url pkg:rpm/redhat/cfme@5.8.5.1-1?arch=el7cf

purl pkg:rpm/redhat/cfme@5.8.5.1-1?arch=el7cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-q4bk-1qay-ffbh

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme@5.8.5.1-1%3Farch=el7cf

url pkg:rpm/redhat/cfme@5.9.4.7-1?arch=el7cf

purl pkg:rpm/redhat/cfme@5.9.4.7-1?arch=el7cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-q4bk-1qay-ffbh

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme@5.9.4.7-1%3Farch=el7cf

url pkg:rpm/redhat/cfme-amazon-smartstate@5.9.4.7-1?arch=el7cf

purl pkg:rpm/redhat/cfme-amazon-smartstate@5.9.4.7-1?arch=el7cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-q4bk-1qay-ffbh

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme-amazon-smartstate@5.9.4.7-1%3Farch=el7cf

url pkg:rpm/redhat/cfme-appliance@5.8.5.1-1?arch=el7cf

purl pkg:rpm/redhat/cfme-appliance@5.8.5.1-1?arch=el7cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-q4bk-1qay-ffbh

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme-appliance@5.8.5.1-1%3Farch=el7cf

url pkg:rpm/redhat/cfme-appliance@5.9.4.7-1?arch=el7cf

purl pkg:rpm/redhat/cfme-appliance@5.9.4.7-1?arch=el7cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-q4bk-1qay-ffbh

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme-appliance@5.9.4.7-1%3Farch=el7cf

url pkg:rpm/redhat/cfme-gemset@5.8.5.1-1?arch=el7cf

purl pkg:rpm/redhat/cfme-gemset@5.8.5.1-1?arch=el7cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-q4bk-1qay-ffbh

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme-gemset@5.8.5.1-1%3Farch=el7cf

url pkg:rpm/redhat/cfme-gemset@5.9.4.7-1?arch=el7cf

purl pkg:rpm/redhat/cfme-gemset@5.9.4.7-1?arch=el7cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-q4bk-1qay-ffbh

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme-gemset@5.9.4.7-1%3Farch=el7cf

100

url pkg:rpm/redhat/rh-postgresql95-postgresql-pglogical@1.2.1-2?arch=el7cf

purl pkg:rpm/redhat/rh-postgresql95-postgresql-pglogical@1.2.1-2?arch=el7cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-q4bk-1qay-ffbh

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-postgresql95-postgresql-pglogical@1.2.1-2%3Farch=el7cf

101

url pkg:rpm/redhat/rh-postgresql95-postgresql-pglogical@2.1.0-4?arch=el7cf

purl pkg:rpm/redhat/rh-postgresql95-postgresql-pglogical@2.1.0-4?arch=el7cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5dmr-8tvd-8uen

vulnerability	VCID-q4bk-1qay-ffbh

vulnerability	VCID-s6cp-dk5r-v3aw

vulnerability	VCID-sqa5-8yrd-qyfz

vulnerability	VCID-xby9-avva-a3e5

vulnerability	VCID-zrsc-vqxk-vkgx

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-postgresql95-postgresql-pglogical@2.1.0-4%3Farch=el7cf

102

url pkg:rpm/redhat/rh-ror42-rubygem-sprockets@3.2.0-5?arch=el6

purl pkg:rpm/redhat/rh-ror42-rubygem-sprockets@3.2.0-5?arch=el6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-ror42-rubygem-sprockets@3.2.0-5%3Farch=el6

103

url pkg:rpm/redhat/rh-ror42-rubygem-sprockets@3.2.0-5?arch=el7

purl pkg:rpm/redhat/rh-ror42-rubygem-sprockets@3.2.0-5?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-ror42-rubygem-sprockets@3.2.0-5%3Farch=el7

104

url pkg:rpm/redhat/rh-ror50-rubygem-sprockets@3.7.1-2?arch=el7

purl pkg:rpm/redhat/rh-ror50-rubygem-sprockets@3.7.1-2?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-ror50-rubygem-sprockets@3.7.1-2%3Farch=el7

105

url pkg:rpm/redhat/rh-ror50-rubygem-sprockets@3.7.1-2?arch=el6

purl pkg:rpm/redhat/rh-ror50-rubygem-sprockets@3.7.1-2?arch=el6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-ror50-rubygem-sprockets@3.7.1-2%3Farch=el6

106

url pkg:rpm/redhat/rh-ruby23-rubygem-redhat_access_cfme@2.0.3-1?arch=el7cf

purl pkg:rpm/redhat/rh-ruby23-rubygem-redhat_access_cfme@2.0.3-1?arch=el7cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-q4bk-1qay-ffbh

vulnerability	VCID-s6cp-dk5r-v3aw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-ruby23-rubygem-redhat_access_cfme@2.0.3-1%3Farch=el7cf

References

reference_url

https://access.redhat.com/errata/RHSA-2018:2244

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://access.redhat.com/errata/RHSA-2018:2244

reference_url

https://access.redhat.com/errata/RHSA-2018:2245

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://access.redhat.com/errata/RHSA-2018:2245

reference_url

https://access.redhat.com/errata/RHSA-2018:2561

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://access.redhat.com/errata/RHSA-2018:2561

reference_url

https://access.redhat.com/errata/RHSA-2018:2745

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://access.redhat.com/errata/RHSA-2018:2745

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3760.json

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3760.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2018-3760

reference_id

reference_type

scores

value	0.93829
scoring_system	epss
scoring_elements	0.99863
published_at	2026-04-18T12:55:00Z

value	0.93829
scoring_system	epss
scoring_elements	0.99861
published_at	2026-04-11T12:55:00Z

value	0.93829
scoring_system	epss
scoring_elements	0.99862
published_at	2026-04-13T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2018-3760

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3760
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3760

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url

https://github.com/rails/sprockets

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/rails/sprockets

reference_url

https://github.com/rails/sprockets/commit/18b8a7f07a50c245e9aee7854ecdbe606bbd8bb5

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/rails/sprockets/commit/18b8a7f07a50c245e9aee7854ecdbe606bbd8bb5

reference_url

https://github.com/rails/sprockets/commit/9c34fa05900b968d74f08ccf40917848a7be9441

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/rails/sprockets/commit/9c34fa05900b968d74f08ccf40917848a7be9441

reference_url

https://github.com/rails/sprockets/commit/c09131cf5b2c479263939c8582e22b98ed616c5f

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/rails/sprockets/commit/c09131cf5b2c479263939c8582e22b98ed616c5f

reference_url	https://github.com/rails/sprockets/commit/c09131cf5b2c479263939c8582e22b98ed616c5fhttps://github.com/rails/sprockets/commit/9c34fa05900b968d74f08ccf40917848a7be9441https://github.com/rails/sprockets/commit/18b8a7f07a50c245e9aee7854ecdbe606bbd8bb5
reference_id
reference_type
scores
url	https://github.com/rails/sprockets/commit/c09131cf5b2c479263939c8582e22b98ed616c5fhttps://github.com/rails/sprockets/commit/9c34fa05900b968d74f08ccf40917848a7be9441https://github.com/rails/sprockets/commit/18b8a7f07a50c245e9aee7854ecdbe606bbd8bb5

reference_url

https://groups.google.com/d/msg/rubyonrails-security/ft_J--l55fM/7roDfQ50BwAJ

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://groups.google.com/d/msg/rubyonrails-security/ft_J--l55fM/7roDfQ50BwAJ

reference_url

https://groups.google.com/forum/#!topic/ruby-security-ann/2S9Pwz2i16k

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3
scoring_elements

url

https://groups.google.com/forum/#!topic/ruby-security-ann/2S9Pwz2i16k

reference_url	https://groups.google.com/g/ruby-security-ann/c/2S9Pwz2i16k
reference_id
reference_type
scores
url	https://groups.google.com/g/ruby-security-ann/c/2S9Pwz2i16k

reference_url

https://www.debian.org/security/2018/dsa-4242

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://www.debian.org/security/2018/dsa-4242

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1593058
reference_id	1593058
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1593058

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901913
reference_id	901913
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901913

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:cloudforms:4.5:::::::*
reference_id	cpe:2.3:a:redhat:cloudforms:4.5:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:cloudforms:4.5:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:cloudforms:4.6:::::::*
reference_id	cpe:2.3:a:redhat:cloudforms:4.6:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:cloudforms:4.6:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets::::::::
reference_id	cpe:2.3:a:sprockets_project:sprockets::::::::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets::::::::

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta1::::::
reference_id	cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta1::::::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta1::::::

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta2::::::
reference_id	cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta2::::::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta2::::::

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta3::::::
reference_id	cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta3::::::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta3::::::

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta4::::::
reference_id	cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta4::::::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta4::::::

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta5::::::
reference_id	cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta5::::::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta5::::::

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta6::::::
reference_id	cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta6::::::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta6::::::

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta7::::::
reference_id	cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta7::::::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sprockets_project:sprockets:4.0.0:beta7::::::

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:::::::*
reference_id	cpe:2.3:o:debian:debian_linux:9.0:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*
reference_id	cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:6.7:::::::*
reference_id	cpe:2.3:o:redhat:enterprise_linux:6.7:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:6.7:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:7.0:::::::*
reference_id	cpe:2.3:o:redhat:enterprise_linux:7.0:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:7.0:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:7.3:::::::*
reference_id	cpe:2.3:o:redhat:enterprise_linux:7.3:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:7.3:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:7.4:::::::*
reference_id	cpe:2.3:o:redhat:enterprise_linux:7.4:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:7.4:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:7.5:::::::*
reference_id	cpe:2.3:o:redhat:enterprise_linux:7.5:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:7.5:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:7.6:::::::*
reference_id	cpe:2.3:o:redhat:enterprise_linux:7.6:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:7.6:::::::*

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2018-3760

reference_id

CVE-2018-3760

reference_type

scores

value	5.0
scoring_system	cvssv2
scoring_elements	AV:N/AC:L/Au:N/C:P/I:N/A:N

value	7.5
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2018-3760

reference_url

https://github.com/advisories/GHSA-pr3h-jjhj-573x

reference_id

GHSA-pr3h-jjhj-573x

reference_type

scores

value	HIGH
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-pr3h-jjhj-573x

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	200
name	Exposure of Sensitive Information to an Unauthorized Actor
description	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	22
name	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
description	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Exploits

Severity_range_score 5.0 - 8.9

Exploitability 2.0

Weighted_severity 8.0

Risk_score 10.0

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s6cp-dk5r-v3aw

Vulnerability Instance