Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:alpm/archlinux/python-django@4.0.5-1

Type alpm

Namespace archlinux

Name python-django

Version 4.0.5-1

Qualifiers

Subpath

Is_vulnerable true

Next_non_vulnerable_version 4.0.7-1

Latest_non_vulnerable_version 5.1.9-1

Affected_by_vulnerabilities

url VCID-2n2n-1fq2-7bbs

vulnerability_id VCID-2n2n-1fq2-7bbs

summary sql injection

references

reference_url	https://docs.djangoproject.com/en/4.0/releases/security/
reference_id
reference_type
scores
url	https://docs.djangoproject.com/en/4.0/releases/security/

reference_url	https://github.com/advisories/GHSA-p64x-8rxx-wf6q
reference_id
reference_type
scores
url	https://github.com/advisories/GHSA-p64x-8rxx-wf6q

reference_url	https://groups.google.com/forum/#!forum/django-announce
reference_id
reference_type
scores
url	https://groups.google.com/forum/#!forum/django-announce

reference_url	https://www.djangoproject.com/weblog/2022/jul/04/security-releases/
reference_id
reference_type
scores
url	https://www.djangoproject.com/weblog/2022/jul/04/security-releases/

reference_url

reference_id

AVG-2788

reference_type

scores

url

fixed_packages

url pkg:alpm/archlinux/python-django@4.0.6-1

purl pkg:alpm/archlinux/python-django@4.0.6-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-29qk-rv5n-efbm

resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/python-django@4.0.6-1

aliases CVE-2022-34265, GHSA-p64x-8rxx-wf6q, PYSEC-2022-213

risk_score null

exploitability null

weighted_severity null

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2n2n-1fq2-7bbs

Fixing_vulnerabilities

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/python-django@4.0.5-1

Package Instance