VulnerableCode Package Details - pkg:alpm/archlinux/mediawiki@1.28.0-1

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:alpm/archlinux/mediawiki@1.28.0-1

Essentials
History (10)

purl	pkg:alpm/archlinux/mediawiki@1.28.0-1

Next non-vulnerable version	1.28.3-1
Latest non-vulnerable version	1.38.3-1
Risk	4.0

Vulnerabilities affecting this package (10)

Vulnerability	Summary	Fixed by
VCID-29fv-52ge-mbft Aliases: CVE-2017-0362	mediawiki: "Mark all pages visited" on the watchlist does not require a CSRF token	1.28.1-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-e3ad-yw1a-nbbu Aliases: CVE-2017-0368	mediawiki: Make rawHTML mode not apply to system messages	1.28.1-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-k6ry-6a7f-eqd7 Aliases: CVE-2017-0370	mediawiki: Improper URL sanitization in Spam blacklist	1.28.1-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-nqg1-1fyx-ruf9 Aliases: CVE-2017-0364	mediawiki: redirects to any interwiki link in special search	1.28.1-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-sh6q-pur2-gkag Aliases: CVE-2017-0366	mediawiki: SVG filter evasion using default attribute values in DTD declaration	1.28.1-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-sz6n-4pbk-d7ay Aliases: CVE-2017-0361	mediawiki: information disclosure in the api.log	1.28.1-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.29.2-1 Affected by 0 other vulnerabilities.
VCID-ubbe-qu8g-5fa1 Aliases: CVE-2017-0367	mediawiki: unsafe use of temporary directory	1.28.1-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-xqkp-986n-m7f3 Aliases: CVE-2017-0369	mediawiki: Improper Access Control to protected pages	1.28.1-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-zmzk-jv3z-tub4 Aliases: CVE-2017-0363	mediawiki: open redirect to external sites	1.28.1-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-zz68-pwk2-abew Aliases: CVE-2017-0365	mediawiki: XSS in SearchHighlighter::highlightText()	1.28.1-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-01T18:26:16.072982+00:00	Arch Linux Importer	Affected by	VCID-sz6n-4pbk-d7ay	https://security.archlinux.org/AVG-236	38.0.0
2026-04-01T18:26:16.050469+00:00	Arch Linux Importer	Affected by	VCID-29fv-52ge-mbft	https://security.archlinux.org/AVG-236	38.0.0
2026-04-01T18:26:16.025899+00:00	Arch Linux Importer	Affected by	VCID-zmzk-jv3z-tub4	https://security.archlinux.org/AVG-236	38.0.0
2026-04-01T18:26:16.003532+00:00	Arch Linux Importer	Affected by	VCID-nqg1-1fyx-ruf9	https://security.archlinux.org/AVG-236	38.0.0
2026-04-01T18:26:15.981454+00:00	Arch Linux Importer	Affected by	VCID-zz68-pwk2-abew	https://security.archlinux.org/AVG-236	38.0.0
2026-04-01T18:26:15.958342+00:00	Arch Linux Importer	Affected by	VCID-sh6q-pur2-gkag	https://security.archlinux.org/AVG-236	38.0.0
2026-04-01T18:26:15.936014+00:00	Arch Linux Importer	Affected by	VCID-ubbe-qu8g-5fa1	https://security.archlinux.org/AVG-236	38.0.0
2026-04-01T18:26:15.913732+00:00	Arch Linux Importer	Affected by	VCID-e3ad-yw1a-nbbu	https://security.archlinux.org/AVG-236	38.0.0
2026-04-01T18:26:15.890662+00:00	Arch Linux Importer	Affected by	VCID-xqkp-986n-m7f3	https://security.archlinux.org/AVG-236	38.0.0
2026-04-01T18:26:15.867281+00:00	Arch Linux Importer	Affected by	VCID-k6ry-6a7f-eqd7	https://security.archlinux.org/AVG-236	38.0.0