Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/symfony/routing@2.0.7
Typecomposer
Namespacesymfony
Namerouting
Version2.0.7
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.0.19
Latest_non_vulnerable_version8.0.12
Affected_by_vulnerabilities
0
url VCID-86ct-zv8d-d3eb
vulnerability_id VCID-86ct-zv8d-d3eb
summary 
Routes behind a firewall are accessible even when not logged in
Symfony does not process URL encoded data consistently within the Routing and Security components, which allows remote attackers to bypass intended URI restrictions via a doubly encoded string.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-6431
reference_id
reference_type
scores
0
value 0.0022
scoring_system epss
scoring_elements 0.44616
published_at 2026-06-04T12:55:00Z
1
value 0.0022
scoring_system epss
scoring_elements 0.44686
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-6431
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2012-6431.yaml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2012-6431.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/routing/CVE-2012-6431.yaml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/routing/CVE-2012-6431.yaml
3
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2012-6431.yaml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2012-6431.yaml
4
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2012-6431.yaml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2012-6431.yaml
5
reference_url https://github.com/symfony/symfony/commit/55014a6841bec50046e8329a4835c160ac31a496
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/symfony/symfony/commit/55014a6841bec50046e8329a4835c160ac31a496
6
reference_url https://github.com/symfony/symfony/commit/8b2c17f80377582287a78e0b521497e039dd6b0d
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/symfony/symfony/commit/8b2c17f80377582287a78e0b521497e039dd6b0d
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-6431
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-6431
8
reference_url https://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released
9
reference_url http://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released
fixed_packages
0
url pkg:composer/symfony/routing@2.0.19
purl pkg:composer/symfony/routing@2.0.19
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/routing@2.0.19
aliases CVE-2012-6431, GHSA-83c3-qx27-2rwr
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-86ct-zv8d-d3eb
1
url VCID-nv15-yhee-tfc4
vulnerability_id VCID-nv15-yhee-tfc4
summary 
Improper Restriction of XML External Entity Reference
Security issues related to the way XML is handled.
references
0
reference_url https://symfony.com/blog/security-release-symfony-2-0-17-released
reference_id
reference_type
scores
url https://symfony.com/blog/security-release-symfony-2-0-17-released
fixed_packages
0
url pkg:composer/symfony/routing@2.0.17
purl pkg:composer/symfony/routing@2.0.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-86ct-zv8d-d3eb
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/routing@2.0.17
aliases GMS-2012-10
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nv15-yhee-tfc4
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/symfony/routing@2.0.7