Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-je6z-v5qw-ufew
SummaryDuring the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted Extensions messages), the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosure if a network-local attacker can inject messages during the handshake.
Aliases
0
alias CVE-2025-61730
Fixed_packages
0
url pkg:apk/alpine/go@1.24.12-r0?arch=s390x&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.12-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=s390x&distroversion=v3.22&reponame=community
1
url pkg:apk/alpine/go@1.24.12-r0?arch=aarch64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.12-r0?arch=aarch64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=aarch64&distroversion=v3.22&reponame=community
2
url pkg:apk/alpine/go@1.24.12-r0?arch=loongarch64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.12-r0?arch=loongarch64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=loongarch64&distroversion=v3.22&reponame=community
3
url pkg:apk/alpine/go@1.24.12-r0?arch=x86&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.12-r0?arch=x86&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=x86&distroversion=v3.22&reponame=community
4
url pkg:apk/alpine/go@1.24.12-r0?arch=x86_64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.12-r0?arch=x86_64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=x86_64&distroversion=v3.22&reponame=community
5
url pkg:apk/alpine/go@1.24.12-r0?arch=ppc64le&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.12-r0?arch=ppc64le&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=ppc64le&distroversion=v3.22&reponame=community
6
url pkg:apk/alpine/go@1.24.12-r0?arch=riscv64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.12-r0?arch=riscv64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=riscv64&distroversion=v3.22&reponame=community
7
url pkg:apk/alpine/go@1.24.12-r0?arch=armhf&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.12-r0?arch=armhf&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=armhf&distroversion=v3.22&reponame=community
8
url pkg:apk/alpine/go@1.24.12-r0?arch=armv7&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.12-r0?arch=armv7&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=armv7&distroversion=v3.22&reponame=community
9
url pkg:apk/alpine/go@1.25.6-r0?arch=x86_64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=x86_64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=x86_64&distroversion=v3.23&reponame=community
10
url pkg:apk/alpine/go@1.25.6-r0?arch=aarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=aarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=aarch64&distroversion=edge&reponame=community
11
url pkg:apk/alpine/go@1.25.6-r0?arch=s390x&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=s390x&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=s390x&distroversion=v3.23&reponame=community
12
url pkg:apk/alpine/go@1.25.6-r0?arch=aarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=aarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=aarch64&distroversion=v3.23&reponame=community
13
url pkg:apk/alpine/go@1.25.6-r0?arch=armhf&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=armhf&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=armhf&distroversion=edge&reponame=community
14
url pkg:apk/alpine/go@1.25.6-r0?arch=x86&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=x86&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=x86&distroversion=v3.23&reponame=community
15
url pkg:apk/alpine/go@1.25.6-r0?arch=ppc64le&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=ppc64le&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=ppc64le&distroversion=edge&reponame=community
16
url pkg:apk/alpine/go@1.25.6-r0?arch=x86_64&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=x86_64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=x86_64&distroversion=edge&reponame=community
17
url pkg:apk/alpine/go@1.25.6-r0?arch=armv7&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=armv7&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=armv7&distroversion=edge&reponame=community
18
url pkg:apk/alpine/go@1.25.6-r0?arch=loongarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=loongarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=loongarch64&distroversion=edge&reponame=community
19
url pkg:apk/alpine/go@1.25.6-r0?arch=riscv64&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=riscv64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=riscv64&distroversion=edge&reponame=community
20
url pkg:apk/alpine/go@1.25.6-r0?arch=s390x&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=s390x&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=s390x&distroversion=edge&reponame=community
21
url pkg:apk/alpine/go@1.25.6-r0?arch=x86&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=x86&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=x86&distroversion=edge&reponame=community
22
url pkg:apk/alpine/go@1.25.6-r0?arch=armhf&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=armhf&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=armhf&distroversion=v3.23&reponame=community
23
url pkg:apk/alpine/go@1.25.6-r0?arch=armv7&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=armv7&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=armv7&distroversion=v3.23&reponame=community
24
url pkg:apk/alpine/go@1.25.6-r0?arch=loongarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=loongarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community
25
url pkg:apk/alpine/go@1.25.6-r0?arch=ppc64le&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=ppc64le&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=ppc64le&distroversion=v3.23&reponame=community
26
url pkg:apk/alpine/go@1.25.6-r0?arch=riscv64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.25.6-r0?arch=riscv64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=riscv64&distroversion=v3.23&reponame=community
27
url pkg:deb/debian/golang-1.24@1.24.9-1
purl pkg:deb/debian/golang-1.24@1.24.9-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.9-1
28
url pkg:deb/debian/golang-1.24@1.24.12-1?distro=trixie
purl pkg:deb/debian/golang-1.24@1.24.12-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.12-1%3Fdistro=trixie
29
url pkg:deb/debian/golang-1.24@1.24.13-2?distro=trixie
purl pkg:deb/debian/golang-1.24@1.24.13-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.13-2%3Fdistro=trixie
30
url pkg:deb/debian/golang-1.25@1.25.6-1?distro=sid
purl pkg:deb/debian/golang-1.25@1.25.6-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.25@1.25.6-1%3Fdistro=sid
31
url pkg:deb/debian/golang-1.25@1.25.8-1?distro=sid
purl pkg:deb/debian/golang-1.25@1.25.8-1?distro=sid
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-245f-jhkn-w3ck
1
vulnerability VCID-91yp-p6st-8ucd
2
vulnerability VCID-ju53-xpej-3qca
3
vulnerability VCID-s176-xcrb-e3ea
4
vulnerability VCID-svbs-h3y5-wfbn
5
vulnerability VCID-t19m-gs1u-rbfp
6
vulnerability VCID-tf52-aa91-4kf3
7
vulnerability VCID-tmb1-tq9e-puhd
8
vulnerability VCID-vw1r-8zev-ykf4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.25@1.25.8-1%3Fdistro=sid
32
url pkg:deb/debian/golang-1.25@1.25.9-1?distro=sid
purl pkg:deb/debian/golang-1.25@1.25.9-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.25@1.25.9-1%3Fdistro=sid
Affected_packages
0
url pkg:deb/debian/golang-1.24@1.24.4-1?distro=trixie
purl pkg:deb/debian/golang-1.24@1.24.4-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1aty-87pz-5yb8
1
vulnerability VCID-254d-pjst-c7hx
2
vulnerability VCID-3nqb-6mna-jyb4
3
vulnerability VCID-5n8q-zcds-gyen
4
vulnerability VCID-5q9b-a7c4-1yht
5
vulnerability VCID-7n3z-vwk2-3ydr
6
vulnerability VCID-9ky3-s2vk-cuge
7
vulnerability VCID-br2f-7ux9-hkhg
8
vulnerability VCID-bv1f-bee8-cbek
9
vulnerability VCID-csmt-e61b-tued
10
vulnerability VCID-dp1t-v58b-43du
11
vulnerability VCID-dtt9-gmqf-nbaf
12
vulnerability VCID-eyev-qpgs-hfbx
13
vulnerability VCID-hay4-q9m3-ekdj
14
vulnerability VCID-je6z-v5qw-ufew
15
vulnerability VCID-mvsr-c2yh-mbdq
16
vulnerability VCID-q9yj-ze4x-qyfr
17
vulnerability VCID-rvbr-nser-sfe7
18
vulnerability VCID-sb3w-x3yv-ffft
19
vulnerability VCID-t2dr-6dz3-7qgt
20
vulnerability VCID-usyf-s559-pkgx
21
vulnerability VCID-wchc-as62-1fae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.4-1%3Fdistro=trixie
1
url pkg:deb/debian/golang-1.24@1.24.4-1
purl pkg:deb/debian/golang-1.24@1.24.4-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1aty-87pz-5yb8
1
vulnerability VCID-254d-pjst-c7hx
2
vulnerability VCID-3nqb-6mna-jyb4
3
vulnerability VCID-5n8q-zcds-gyen
4
vulnerability VCID-5q9b-a7c4-1yht
5
vulnerability VCID-7n3z-vwk2-3ydr
6
vulnerability VCID-9ky3-s2vk-cuge
7
vulnerability VCID-br2f-7ux9-hkhg
8
vulnerability VCID-bv1f-bee8-cbek
9
vulnerability VCID-csmt-e61b-tued
10
vulnerability VCID-dp1t-v58b-43du
11
vulnerability VCID-dtt9-gmqf-nbaf
12
vulnerability VCID-eyev-qpgs-hfbx
13
vulnerability VCID-hay4-q9m3-ekdj
14
vulnerability VCID-je6z-v5qw-ufew
15
vulnerability VCID-mvsr-c2yh-mbdq
16
vulnerability VCID-q9yj-ze4x-qyfr
17
vulnerability VCID-rvbr-nser-sfe7
18
vulnerability VCID-sb3w-x3yv-ffft
19
vulnerability VCID-t2dr-6dz3-7qgt
20
vulnerability VCID-usyf-s559-pkgx
21
vulnerability VCID-wchc-as62-1fae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.4-1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61730
reference_id
reference_type
scores
0
value 8e-05
scoring_system epss
scoring_elements 0.00783
published_at 2026-04-04T12:55:00Z
1
value 8e-05
scoring_system epss
scoring_elements 0.00781
published_at 2026-04-02T12:55:00Z
2
value 9e-05
scoring_system epss
scoring_elements 0.00819
published_at 2026-04-16T12:55:00Z
3
value 9e-05
scoring_system epss
scoring_elements 0.0082
published_at 2026-04-13T12:55:00Z
4
value 9e-05
scoring_system epss
scoring_elements 0.00818
published_at 2026-04-12T12:55:00Z
5
value 9e-05
scoring_system epss
scoring_elements 0.00824
published_at 2026-04-18T12:55:00Z
6
value 9e-05
scoring_system epss
scoring_elements 0.00835
published_at 2026-04-09T12:55:00Z
7
value 9e-05
scoring_system epss
scoring_elements 0.00839
published_at 2026-04-08T12:55:00Z
8
value 9e-05
scoring_system epss
scoring_elements 0.00834
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61730
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61730
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61730
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125916
reference_id 1125916
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125916
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125917
reference_id 1125917
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125917
5
reference_url https://go.dev/cl/724120
reference_id 724120
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-02T17:28:46Z/
url https://go.dev/cl/724120
6
reference_url https://go.dev/issue/76443
reference_id 76443
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-02T17:28:46Z/
url https://go.dev/issue/76443
7
reference_url https://pkg.go.dev/vuln/GO-2026-4340
reference_id GO-2026-4340
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-02T17:28:46Z/
url https://pkg.go.dev/vuln/GO-2026-4340
8
reference_url https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc
reference_id Vd2tYVM8eUc
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-02T17:28:46Z/
url https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc
Weaknesses
0
cwe_id 940
name Improper Verification of Source of a Communication Channel
description The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.
Exploits
Severity_range_score3.7 - 5.3
Exploitability0.5
Weighted_severity4.2
Risk_score2.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-je6z-v5qw-ufew