Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.qpid/proton-j@0.7
Typemaven
Namespaceorg.apache.qpid
Nameproton-j
Version0.7
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version0.30.0
Latest_non_vulnerable_version0.30.0
Affected_by_vulnerabilities
0
url VCID-6xkf-evrx-pyau
vulnerability_id VCID-6xkf-evrx-pyau
summary 
Exposure of Sensitive Information to an Unauthorized Actor
The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.
references
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182414.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182414.html
1
reference_url http://packetstormsecurity.com/files/136403/Apache-Qpid-Proton-0.12.0-SSL-Failure.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/136403/Apache-Qpid-Proton-0.12.0-SSL-Failure.html
2
reference_url http://qpid.apache.org/releases/qpid-proton-0.12.1/release-notes.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://qpid.apache.org/releases/qpid-proton-0.12.1/release-notes.html
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2166.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2166.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-2166
reference_id
reference_type
scores
0
value 0.00271
scoring_system epss
scoring_elements 0.50523
published_at 2026-05-12T12:55:00Z
1
value 0.00271
scoring_system epss
scoring_elements 0.50596
published_at 2026-04-08T12:55:00Z
2
value 0.00271
scoring_system epss
scoring_elements 0.50593
published_at 2026-04-09T12:55:00Z
3
value 0.00271
scoring_system epss
scoring_elements 0.50635
published_at 2026-04-11T12:55:00Z
4
value 0.00271
scoring_system epss
scoring_elements 0.50613
published_at 2026-04-12T12:55:00Z
5
value 0.00271
scoring_system epss
scoring_elements 0.50599
published_at 2026-05-14T12:55:00Z
6
value 0.00271
scoring_system epss
scoring_elements 0.5064
published_at 2026-04-16T12:55:00Z
7
value 0.00271
scoring_system epss
scoring_elements 0.50646
published_at 2026-04-18T12:55:00Z
8
value 0.00271
scoring_system epss
scoring_elements 0.50625
published_at 2026-04-21T12:55:00Z
9
value 0.00271
scoring_system epss
scoring_elements 0.50573
published_at 2026-04-24T12:55:00Z
10
value 0.00271
scoring_system epss
scoring_elements 0.5058
published_at 2026-04-26T12:55:00Z
11
value 0.00271
scoring_system epss
scoring_elements 0.50535
published_at 2026-04-29T12:55:00Z
12
value 0.00271
scoring_system epss
scoring_elements 0.50454
published_at 2026-05-05T12:55:00Z
13
value 0.00271
scoring_system epss
scoring_elements 0.50508
published_at 2026-05-07T12:55:00Z
14
value 0.00271
scoring_system epss
scoring_elements 0.50538
published_at 2026-05-09T12:55:00Z
15
value 0.00271
scoring_system epss
scoring_elements 0.50492
published_at 2026-05-11T12:55:00Z
16
value 0.00271
scoring_system epss
scoring_elements 0.50504
published_at 2026-04-01T12:55:00Z
17
value 0.00271
scoring_system epss
scoring_elements 0.5056
published_at 2026-04-02T12:55:00Z
18
value 0.00271
scoring_system epss
scoring_elements 0.50588
published_at 2026-04-04T12:55:00Z
19
value 0.00271
scoring_system epss
scoring_elements 0.50541
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-2166
5
reference_url https://git-wip-us.apache.org/repos/asf?p=qpid-proton.git%3Bh=a058585
reference_id
reference_type
scores
url https://git-wip-us.apache.org/repos/asf?p=qpid-proton.git%3Bh=a058585
6
reference_url https://git-wip-us.apache.org/repos/asf?p=qpid-proton.git;h=a058585
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://git-wip-us.apache.org/repos/asf?p=qpid-proton.git;h=a058585
7
reference_url https://issues.apache.org/jira/browse/PROTON-1157
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/PROTON-1157
8
reference_url https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d@%3Ccommits.qpid.apache.org%3E
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d@%3Ccommits.qpid.apache.org%3E
9
reference_url https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d%40%3Ccommits.qpid.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d%40%3Ccommits.qpid.apache.org%3E
10
reference_url http://www.securityfocus.com/archive/1/537864/100/0/threaded
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/archive/1/537864/100/0/threaded
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1320842
reference_id 1320842
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1320842
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:qpid_proton:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:qpid_proton:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:qpid_proton:*:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
reference_id cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-2166
reference_id CVE-2016-2166
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:N
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
2
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-2166
15
reference_url https://github.com/advisories/GHSA-f5cf-f7px-xpmh
reference_id GHSA-f5cf-f7px-xpmh
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-f5cf-f7px-xpmh
fixed_packages
0
url pkg:maven/org.apache.qpid/proton-j@0.12.1
purl pkg:maven/org.apache.qpid/proton-j@0.12.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9nj7-fupw-vqaw
1
vulnerability VCID-sbrt-43uu-6qgt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.12.1
aliases CVE-2016-2166, GHSA-f5cf-f7px-xpmh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6xkf-evrx-pyau
1
url VCID-sbrt-43uu-6qgt
vulnerability_id VCID-sbrt-43uu-6qgt
summary The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.ssl(...)' methods. Unless a verification mode was explicitly configured, client and server modes previously defaulted as documented to not verifying a peer certificate, with options to configure this explicitly or select a certificate verification mode with or without hostname verification being performed. The latter hostname verifying mode was not implemented in Apache Qpid Proton-J versions 0.3 to 0.29.0, with attempts to use it resulting in an exception. This left only the option to verify the certificate is trusted, leaving such a client vulnerable to Man In The Middle (MITM) attack. Uses of the Proton-J protocol engine which do not utilise the optional transport TLS wrapper are not impacted, e.g. usage within Qpid JMS. Uses of Proton-J utilising the optional transport TLS wrapper layer that wish to enable hostname verification must be upgraded to version 0.30.0 or later and utilise the VerifyMode#VERIFY_PEER_NAME configuration, which is now the default for client mode usage unless configured otherwise.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17187.json
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17187.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-17187
reference_id
reference_type
scores
0
value 0.00259
scoring_system epss
scoring_elements 0.4927
published_at 2026-05-14T12:55:00Z
1
value 0.00259
scoring_system epss
scoring_elements 0.49252
published_at 2026-04-08T12:55:00Z
2
value 0.00259
scoring_system epss
scoring_elements 0.49248
published_at 2026-04-09T12:55:00Z
3
value 0.00259
scoring_system epss
scoring_elements 0.49266
published_at 2026-04-11T12:55:00Z
4
value 0.00259
scoring_system epss
scoring_elements 0.49239
published_at 2026-04-12T12:55:00Z
5
value 0.00259
scoring_system epss
scoring_elements 0.49244
published_at 2026-04-13T12:55:00Z
6
value 0.00259
scoring_system epss
scoring_elements 0.49291
published_at 2026-04-16T12:55:00Z
7
value 0.00259
scoring_system epss
scoring_elements 0.49287
published_at 2026-04-18T12:55:00Z
8
value 0.00259
scoring_system epss
scoring_elements 0.49256
published_at 2026-04-21T12:55:00Z
9
value 0.00259
scoring_system epss
scoring_elements 0.49254
published_at 2026-04-26T12:55:00Z
10
value 0.00259
scoring_system epss
scoring_elements 0.49212
published_at 2026-04-29T12:55:00Z
11
value 0.00259
scoring_system epss
scoring_elements 0.49127
published_at 2026-05-05T12:55:00Z
12
value 0.00259
scoring_system epss
scoring_elements 0.49191
published_at 2026-05-07T12:55:00Z
13
value 0.00259
scoring_system epss
scoring_elements 0.49219
published_at 2026-05-09T12:55:00Z
14
value 0.00259
scoring_system epss
scoring_elements 0.49168
published_at 2026-05-11T12:55:00Z
15
value 0.00259
scoring_system epss
scoring_elements 0.49195
published_at 2026-05-12T12:55:00Z
16
value 0.00259
scoring_system epss
scoring_elements 0.49186
published_at 2026-04-01T12:55:00Z
17
value 0.00259
scoring_system epss
scoring_elements 0.49217
published_at 2026-04-02T12:55:00Z
18
value 0.00259
scoring_system epss
scoring_elements 0.49245
published_at 2026-04-24T12:55:00Z
19
value 0.00259
scoring_system epss
scoring_elements 0.49197
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-17187
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17187
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17187
3
reference_url https://github.com/advisories/GHSA-xvch-r4wf-h8w9
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-xvch-r4wf-h8w9
4
reference_url https://github.com/apache/qpid-proton-j/commit/0cb8ca03cec42120dcfc434561592d89a89a805e
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/qpid-proton-j/commit/0cb8ca03cec42120dcfc434561592d89a89a805e
5
reference_url https://issues.apache.org/jira/browse/PROTON-1962
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/PROTON-1962
6
reference_url https://mail-archives.apache.org/mod_mbox/qpid-users/201811.mbox/%3CCAFitrpQSV73Vz7rJYfLJK7gvEymZSCR5ooWUeU8j4jzRydk-eg%40mail.gmail.com%3E
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://mail-archives.apache.org/mod_mbox/qpid-users/201811.mbox/%3CCAFitrpQSV73Vz7rJYfLJK7gvEymZSCR5ooWUeU8j4jzRydk-eg%40mail.gmail.com%3E
7
reference_url http://www.securityfocus.com/bid/105935
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/105935
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1651837
reference_id 1651837
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1651837
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-17187
reference_id CVE-2018-17187
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-17187
10
reference_url https://qpid.apache.org/cves/CVE-2018-17187.html
reference_id CVE-2018-17187.HTML
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://qpid.apache.org/cves/CVE-2018-17187.html
fixed_packages
0
url pkg:maven/org.apache.qpid/proton-j@0.30.0
purl pkg:maven/org.apache.qpid/proton-j@0.30.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.30.0
aliases CVE-2018-17187, GHSA-xvch-r4wf-h8w9
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sbrt-43uu-6qgt
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.qpid/proton-j@0.7