Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/com.azure/azure-security-keyvault-keys@4.10.3
Typemaven
Namespacecom.azure
Nameazure-security-keyvault-keys
Version4.10.3
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.10.6
Latest_non_vulnerable_version4.10.6
Affected_by_vulnerabilities
0
url VCID-4zc5-vhh7-huh5
vulnerability_id VCID-4zc5-vhh7-huh5
summary The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted encrypted input may bypass integrity verification checks. Operations delegated to the Key Vault service are not affected. The issue is addressed in version 4.10.6.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-33117
reference_id
reference_type
scores
0
value 0.0003
scoring_system epss
scoring_elements 0.08999
published_at 2026-06-11T12:55:00Z
1
value 0.0003
scoring_system epss
scoring_elements 0.09049
published_at 2026-06-12T12:55:00Z
2
value 0.00033
scoring_system epss
scoring_elements 0.1008
published_at 2026-06-14T12:55:00Z
3
value 0.00033
scoring_system epss
scoring_elements 0.10096
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-33117
1
reference_url https://github.com/Azure/azure-sdk-for-java
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/Azure/azure-sdk-for-java
2
reference_url https://github.com/Azure/azure-sdk-for-java/commit/1b5c5c79d85a5c9a9cfd07f6cdff6fd0f50eccf9
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/Azure/azure-sdk-for-java/commit/1b5c5c79d85a5c9a9cfd07f6cdff6fd0f50eccf9
3
reference_url https://github.com/Azure/azure-sdk-for-java/pull/48476
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/Azure/azure-sdk-for-java/pull/48476
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-33117
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-33117
5
reference_url https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33117
reference_id CVE-2026-33117
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
1
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-05-13T03:57:37Z/
url https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33117
6
reference_url https://github.com/advisories/GHSA-97jf-46m3-8953
reference_id GHSA-97jf-46m3-8953
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-97jf-46m3-8953
fixed_packages
0
url pkg:maven/com.azure/azure-security-keyvault-keys@4.10.6
purl pkg:maven/com.azure/azure-security-keyvault-keys@4.10.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.azure/azure-security-keyvault-keys@4.10.6
aliases CVE-2026-33117, GHSA-97jf-46m3-8953
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4zc5-vhh7-huh5
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/com.azure/azure-security-keyvault-keys@4.10.3