Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/vtk9@9.1.0%2Breally9.1.0%2Bdfsg2-8?distro=trixie
Typedeb
Namespacedebian
Namevtk9
Version9.1.0+really9.1.0+dfsg2-8
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version9.3.0+dfsg1-4
Latest_non_vulnerable_version9.5.2+dfsg4-5
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-ht5q-p914-tbef
vulnerability_id VCID-ht5q-p914-tbef
summary There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer dereference may crash the application.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-42521
reference_id
reference_type
scores
0
value 0.00483
scoring_system epss
scoring_elements 0.65695
published_at 2026-06-11T12:55:00Z
1
value 0.00483
scoring_system epss
scoring_elements 0.65793
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-42521
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42521
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42521
2
reference_url https://discourse.vtk.org/t/vtk-9-2-5-is-out/10549
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://discourse.vtk.org/t/vtk-9-2-5-is-out/10549
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vtk/PYSEC-2022-255.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vtk/PYSEC-2022-255.yaml
4
reference_url https://gitlab.kitware.com/vtk/vtk
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://gitlab.kitware.com/vtk/vtk
5
reference_url https://gitlab.kitware.com/vtk/vtk/issues/17818
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://gitlab.kitware.com/vtk/vtk/issues/17818
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PCTMSAAVP4BW2HTZLDWMGKZ2WEC5OFLK
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PCTMSAAVP4BW2HTZLDWMGKZ2WEC5OFLK
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031877
reference_id 1031877
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031877
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034843
reference_id 1034843
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034843
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034844
reference_id 1034844
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034844
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-42521
reference_id CVE-2021-42521
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-42521
11
reference_url https://github.com/advisories/GHSA-xfhg-9pjg-xg7g
reference_id GHSA-xfhg-9pjg-xg7g
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xfhg-9pjg-xg7g
fixed_packages
0
url pkg:deb/debian/vtk9@9.1.0%2Breally9.1.0%2Bdfsg2-8?distro=trixie
purl pkg:deb/debian/vtk9@9.1.0%2Breally9.1.0%2Bdfsg2-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vtk9@9.1.0%252Breally9.1.0%252Bdfsg2-8%3Fdistro=trixie
1
url pkg:deb/debian/vtk9@9.3.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/vtk9@9.3.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vtk9@9.3.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/vtk9@9.5.2%2Bdfsg4-5?distro=trixie
purl pkg:deb/debian/vtk9@9.5.2%2Bdfsg4-5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vtk9@9.5.2%252Bdfsg4-5%3Fdistro=trixie
aliases CVE-2021-42521, GHSA-xfhg-9pjg-xg7g, PYSEC-2022-255
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ht5q-p914-tbef
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/vtk9@9.1.0%252Breally9.1.0%252Bdfsg2-8%3Fdistro=trixie