Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-wmv1-2hjk-8ycf
SummaryThe (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users to execute arbitrary code via a crafted catalog request.
Aliases
0
alias CVE-2013-1640
Fixed_packages
0
url pkg:deb/debian/puppet@2.7.18-3?distro=bullseye
purl pkg:deb/debian/puppet@2.7.18-3?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.7.18-3%3Fdistro=bullseye
1
url pkg:deb/debian/puppet@2.7.23-1~deb7u3
purl pkg:deb/debian/puppet@2.7.23-1~deb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1n9j-3ymz-dub5
1
vulnerability VCID-38dv-ps67-r7f7
2
vulnerability VCID-3xtf-acbg-nqhe
3
vulnerability VCID-86jb-mnzj-e3cy
4
vulnerability VCID-b5ns-wtb6-fkha
5
vulnerability VCID-jj8h-wz8z-xfbq
6
vulnerability VCID-mn3q-6cs1-ukcq
7
vulnerability VCID-nrht-tzzq-eqhs
8
vulnerability VCID-wqeh-3r7d-7ffz
9
vulnerability VCID-wqm7-m41f-pqfm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.7.23-1~deb7u3
2
url pkg:deb/debian/puppet@5.5.22-2?distro=bullseye
purl pkg:deb/debian/puppet@5.5.22-2?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@5.5.22-2%3Fdistro=bullseye
3
url pkg:ebuild/app-admin/puppet@2.7.23
purl pkg:ebuild/app-admin/puppet@2.7.23
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-admin/puppet@2.7.23
Affected_packages
0
url pkg:deb/debian/puppet@0.20.1-1
purl pkg:deb/debian/puppet@0.20.1-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1n9j-3ymz-dub5
1
vulnerability VCID-38dv-ps67-r7f7
2
vulnerability VCID-3xtf-acbg-nqhe
3
vulnerability VCID-6816-tprb-zqgt
4
vulnerability VCID-7gsz-qxb2-mbe7
5
vulnerability VCID-7wuf-dtva-x7ej
6
vulnerability VCID-86jb-mnzj-e3cy
7
vulnerability VCID-982t-up4e-t7eg
8
vulnerability VCID-9t7v-tnzt-cqa6
9
vulnerability VCID-b5ns-wtb6-fkha
10
vulnerability VCID-c6dw-92d3-n7c5
11
vulnerability VCID-df8e-jf8b-puec
12
vulnerability VCID-djqs-7e92-wbb7
13
vulnerability VCID-ear8-9pcm-zqfz
14
vulnerability VCID-ej47-hdx8-pbhp
15
vulnerability VCID-fjyu-jwpx-sfe5
16
vulnerability VCID-fwaq-2kzp-2kgc
17
vulnerability VCID-g1nc-3ca8-xkes
18
vulnerability VCID-g5ek-ebw1-ebhf
19
vulnerability VCID-gfnp-y7y2-f7fu
20
vulnerability VCID-jj8h-wz8z-xfbq
21
vulnerability VCID-jrdk-dzhe-z7ff
22
vulnerability VCID-jwz8-kbu1-f3d7
23
vulnerability VCID-khb1-phav-ukf8
24
vulnerability VCID-mn3q-6cs1-ukcq
25
vulnerability VCID-mntc-3nm2-xybw
26
vulnerability VCID-msp5-ahmq-hbc3
27
vulnerability VCID-nrht-tzzq-eqhs
28
vulnerability VCID-qhz5-1muw-dqgn
29
vulnerability VCID-ta3j-j5s5-hfba
30
vulnerability VCID-thv1-66q2-uuc9
31
vulnerability VCID-vxdt-q1t7-27hh
32
vulnerability VCID-wmv1-2hjk-8ycf
33
vulnerability VCID-wpqq-eg3b-3kcc
34
vulnerability VCID-wqeh-3r7d-7ffz
35
vulnerability VCID-wqm7-m41f-pqfm
36
vulnerability VCID-xhmp-nrhy-zfcn
37
vulnerability VCID-xxht-cd83-7qb9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@0.20.1-1
1
url pkg:deb/debian/puppet@0.24.5-3%2Blenny2
purl pkg:deb/debian/puppet@0.24.5-3%2Blenny2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1n9j-3ymz-dub5
1
vulnerability VCID-38dv-ps67-r7f7
2
vulnerability VCID-3xtf-acbg-nqhe
3
vulnerability VCID-6816-tprb-zqgt
4
vulnerability VCID-7gsz-qxb2-mbe7
5
vulnerability VCID-7wuf-dtva-x7ej
6
vulnerability VCID-86jb-mnzj-e3cy
7
vulnerability VCID-982t-up4e-t7eg
8
vulnerability VCID-9t7v-tnzt-cqa6
9
vulnerability VCID-b5ns-wtb6-fkha
10
vulnerability VCID-c6dw-92d3-n7c5
11
vulnerability VCID-df8e-jf8b-puec
12
vulnerability VCID-djqs-7e92-wbb7
13
vulnerability VCID-ear8-9pcm-zqfz
14
vulnerability VCID-ej47-hdx8-pbhp
15
vulnerability VCID-fjyu-jwpx-sfe5
16
vulnerability VCID-fwaq-2kzp-2kgc
17
vulnerability VCID-g1nc-3ca8-xkes
18
vulnerability VCID-g5ek-ebw1-ebhf
19
vulnerability VCID-gfnp-y7y2-f7fu
20
vulnerability VCID-jj8h-wz8z-xfbq
21
vulnerability VCID-jrdk-dzhe-z7ff
22
vulnerability VCID-jwz8-kbu1-f3d7
23
vulnerability VCID-khb1-phav-ukf8
24
vulnerability VCID-mn3q-6cs1-ukcq
25
vulnerability VCID-mntc-3nm2-xybw
26
vulnerability VCID-msp5-ahmq-hbc3
27
vulnerability VCID-nrht-tzzq-eqhs
28
vulnerability VCID-qhz5-1muw-dqgn
29
vulnerability VCID-ta3j-j5s5-hfba
30
vulnerability VCID-thv1-66q2-uuc9
31
vulnerability VCID-vxdt-q1t7-27hh
32
vulnerability VCID-wmv1-2hjk-8ycf
33
vulnerability VCID-wpqq-eg3b-3kcc
34
vulnerability VCID-wqeh-3r7d-7ffz
35
vulnerability VCID-wqm7-m41f-pqfm
36
vulnerability VCID-xhmp-nrhy-zfcn
37
vulnerability VCID-xxht-cd83-7qb9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@0.24.5-3%252Blenny2
2
url pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze9
purl pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1n9j-3ymz-dub5
1
vulnerability VCID-38dv-ps67-r7f7
2
vulnerability VCID-3xtf-acbg-nqhe
3
vulnerability VCID-6816-tprb-zqgt
4
vulnerability VCID-7gsz-qxb2-mbe7
5
vulnerability VCID-7wuf-dtva-x7ej
6
vulnerability VCID-86jb-mnzj-e3cy
7
vulnerability VCID-9t7v-tnzt-cqa6
8
vulnerability VCID-b5ns-wtb6-fkha
9
vulnerability VCID-c6dw-92d3-n7c5
10
vulnerability VCID-df8e-jf8b-puec
11
vulnerability VCID-djqs-7e92-wbb7
12
vulnerability VCID-ear8-9pcm-zqfz
13
vulnerability VCID-ej47-hdx8-pbhp
14
vulnerability VCID-fjyu-jwpx-sfe5
15
vulnerability VCID-fwaq-2kzp-2kgc
16
vulnerability VCID-g1nc-3ca8-xkes
17
vulnerability VCID-g5ek-ebw1-ebhf
18
vulnerability VCID-gfnp-y7y2-f7fu
19
vulnerability VCID-jj8h-wz8z-xfbq
20
vulnerability VCID-jrdk-dzhe-z7ff
21
vulnerability VCID-jwz8-kbu1-f3d7
22
vulnerability VCID-khb1-phav-ukf8
23
vulnerability VCID-mn3q-6cs1-ukcq
24
vulnerability VCID-mntc-3nm2-xybw
25
vulnerability VCID-nrht-tzzq-eqhs
26
vulnerability VCID-qhz5-1muw-dqgn
27
vulnerability VCID-ta3j-j5s5-hfba
28
vulnerability VCID-thv1-66q2-uuc9
29
vulnerability VCID-vxdt-q1t7-27hh
30
vulnerability VCID-wmv1-2hjk-8ycf
31
vulnerability VCID-wqeh-3r7d-7ffz
32
vulnerability VCID-wqm7-m41f-pqfm
33
vulnerability VCID-xhmp-nrhy-zfcn
34
vulnerability VCID-xxht-cd83-7qb9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.6.2-5%252Bsqueeze9
3
url pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze10
purl pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1n9j-3ymz-dub5
1
vulnerability VCID-38dv-ps67-r7f7
2
vulnerability VCID-3xtf-acbg-nqhe
3
vulnerability VCID-6816-tprb-zqgt
4
vulnerability VCID-7gsz-qxb2-mbe7
5
vulnerability VCID-7wuf-dtva-x7ej
6
vulnerability VCID-86jb-mnzj-e3cy
7
vulnerability VCID-9t7v-tnzt-cqa6
8
vulnerability VCID-b5ns-wtb6-fkha
9
vulnerability VCID-c6dw-92d3-n7c5
10
vulnerability VCID-df8e-jf8b-puec
11
vulnerability VCID-djqs-7e92-wbb7
12
vulnerability VCID-ear8-9pcm-zqfz
13
vulnerability VCID-ej47-hdx8-pbhp
14
vulnerability VCID-fjyu-jwpx-sfe5
15
vulnerability VCID-fwaq-2kzp-2kgc
16
vulnerability VCID-g1nc-3ca8-xkes
17
vulnerability VCID-g5ek-ebw1-ebhf
18
vulnerability VCID-gfnp-y7y2-f7fu
19
vulnerability VCID-jj8h-wz8z-xfbq
20
vulnerability VCID-jrdk-dzhe-z7ff
21
vulnerability VCID-jwz8-kbu1-f3d7
22
vulnerability VCID-khb1-phav-ukf8
23
vulnerability VCID-mn3q-6cs1-ukcq
24
vulnerability VCID-mntc-3nm2-xybw
25
vulnerability VCID-nrht-tzzq-eqhs
26
vulnerability VCID-qhz5-1muw-dqgn
27
vulnerability VCID-ta3j-j5s5-hfba
28
vulnerability VCID-thv1-66q2-uuc9
29
vulnerability VCID-vxdt-q1t7-27hh
30
vulnerability VCID-wmv1-2hjk-8ycf
31
vulnerability VCID-wqeh-3r7d-7ffz
32
vulnerability VCID-wqm7-m41f-pqfm
33
vulnerability VCID-xhmp-nrhy-zfcn
34
vulnerability VCID-xxht-cd83-7qb9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.6.2-5%252Bsqueeze10
4
url pkg:rpm/redhat/puppet@2.6.18-1?arch=el6ost
purl pkg:rpm/redhat/puppet@2.6.18-1?arch=el6ost
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7gsz-qxb2-mbe7
1
vulnerability VCID-9t7v-tnzt-cqa6
2
vulnerability VCID-c6dw-92d3-n7c5
3
vulnerability VCID-ej47-hdx8-pbhp
4
vulnerability VCID-fwaq-2kzp-2kgc
5
vulnerability VCID-wmv1-2hjk-8ycf
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/puppet@2.6.18-1%3Farch=el6ost
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1640.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1640.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-1640
reference_id
reference_type
scores
0
value 0.02291
scoring_system epss
scoring_elements 0.85011
published_at 2026-06-04T12:55:00Z
1
value 0.02291
scoring_system epss
scoring_elements 0.85035
published_at 2026-06-05T12:55:00Z
2
value 0.02291
scoring_system epss
scoring_elements 0.85039
published_at 2026-06-06T12:55:00Z
3
value 0.02291
scoring_system epss
scoring_elements 0.85033
published_at 2026-06-07T12:55:00Z
4
value 0.02291
scoring_system epss
scoring_elements 0.85024
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-1640
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1640
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1640
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=919783
reference_id 919783
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=919783
4
reference_url https://security.gentoo.org/glsa/201308-04
reference_id GLSA-201308-04
reference_type
scores
url https://security.gentoo.org/glsa/201308-04
5
reference_url https://access.redhat.com/errata/RHSA-2013:0710
reference_id RHSA-2013:0710
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0710
6
reference_url https://usn.ubuntu.com/1759-1/
reference_id USN-1759-1
reference_type
scores
url https://usn.ubuntu.com/1759-1/
Weaknesses
0
cwe_id 502
name Deserialization of Untrusted Data
description The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-wmv1-2hjk-8ycf