Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/require-node@2.0.0
Typenpm
Namespace
Namerequire-node
Version2.0.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.0.4
Latest_non_vulnerable_version2.0.4
Affected_by_vulnerabilities
0
url VCID-zk63-brke-6bcy
vulnerability_id VCID-zk63-brke-6bcy
summary Arbitrary Code Execution in require-node
references
0
reference_url https://www.npmjs.com/advisories/1015
reference_id
reference_type
scores
0
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.npmjs.com/advisories/1015
1
reference_url https://github.com/advisories/GHSA-8j6j-4h2c-c65p
reference_id GHSA-8j6j-4h2c-c65p
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8j6j-4h2c-c65p
fixed_packages
0
url pkg:npm/require-node@2.0.4
purl pkg:npm/require-node@2.0.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/require-node@2.0.4
aliases GHSA-8j6j-4h2c-c65p
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zk63-brke-6bcy
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/require-node@2.0.0