Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/hoek@2.0.0
Typenpm
Namespace
Namehoek
Version2.0.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-2857-6ncs-2bhj
vulnerability_id VCID-2857-6ncs-2bhj
summary 
hoek prototype pollution
hoek node module before 5.0.3 and before 4.2.1 suffers from a prototype pollution vulnerability via 'merge' and 'applyToDefaults' functions, which allows a malicious user to modify the prototype of 'Object' via __proto__, causing the addition or modification of an existing property that will exist on all objects.
references
0
reference_url https://access.redhat.com/errata/RHSA-2018:1263
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:1263
1
reference_url https://access.redhat.com/errata/RHSA-2018:1264
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:1264
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3728.json
reference_id
reference_type
scores
0
value 2.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3728.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-3728
reference_id
reference_type
scores
0
value 0.01675
scoring_system epss
scoring_elements 0.82506
published_at 2026-06-08T12:55:00Z
1
value 0.01675
scoring_system epss
scoring_elements 0.82487
published_at 2026-06-04T12:55:00Z
2
value 0.01675
scoring_system epss
scoring_elements 0.82516
published_at 2026-06-05T12:55:00Z
3
value 0.01675
scoring_system epss
scoring_elements 0.82515
published_at 2026-06-06T12:55:00Z
4
value 0.01675
scoring_system epss
scoring_elements 0.82513
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-3728
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3728
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3728
5
reference_url https://github.com/hapijs/hoek
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/hapijs/hoek
6
reference_url https://github.com/hapijs/hoek/commit/32ed5c9413321fbc37da5ca81a7cbab693786dee
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/hapijs/hoek/commit/32ed5c9413321fbc37da5ca81a7cbab693786dee
7
reference_url https://github.com/hapijs/hoek/commit/5aed1a8c4a3d55722d1c799f2368857bf418d6df
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/hapijs/hoek/commit/5aed1a8c4a3d55722d1c799f2368857bf418d6df
8
reference_url https://hackerone.com/reports/310439
reference_id
reference_type
scores
0
value 2.5
scoring_system cvssv3
scoring_elements
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://hackerone.com/reports/310439
9
reference_url https://snyk.io/vuln/npm:hoek:20180212
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/npm:hoek:20180212
10
reference_url https://web.archive.org/web/20200227131737/https://www.securityfocus.com/bid/103108
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200227131737/https://www.securityfocus.com/bid/103108
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1545893
reference_id 1545893
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1545893
12
reference_url https://github.com/nodejs/security-wg/blob/main/vuln/npm/367.json
reference_id 367
reference_type
scores
0
value 2.5
scoring_system cvssv3
scoring_elements
url https://github.com/nodejs/security-wg/blob/main/vuln/npm/367.json
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-3728
reference_id CVE-2018-3728
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-3728
14
reference_url https://github.com/advisories/GHSA-jp4x-w63m-7wgm
reference_id GHSA-jp4x-w63m-7wgm
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jp4x-w63m-7wgm
15
reference_url https://access.redhat.com/errata/RHSA-2021:3917
reference_id RHSA-2021:3917
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3917
fixed_packages
0
url pkg:npm/hoek@4.2.1
purl pkg:npm/hoek@4.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6y1e-rtjx-5kgq
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/hoek@4.2.1
1
url pkg:npm/hoek@5.0.3
purl pkg:npm/hoek@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6y1e-rtjx-5kgq
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/hoek@5.0.3
aliases CVE-2018-3728, GHSA-jp4x-w63m-7wgm
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2857-6ncs-2bhj
1
url VCID-6y1e-rtjx-5kgq
vulnerability_id VCID-6y1e-rtjx-5kgq
summary hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-36604.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-36604.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-36604
reference_id
reference_type
scores
0
value 0.01047
scoring_system epss
scoring_elements 0.77864
published_at 2026-06-08T12:55:00Z
1
value 0.01047
scoring_system epss
scoring_elements 0.77852
published_at 2026-06-04T12:55:00Z
2
value 0.01047
scoring_system epss
scoring_elements 0.77879
published_at 2026-06-05T12:55:00Z
3
value 0.01047
scoring_system epss
scoring_elements 0.77885
published_at 2026-06-06T12:55:00Z
4
value 0.01047
scoring_system epss
scoring_elements 0.77875
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-36604
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36604
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36604
3
reference_url https://github.com/hapijs/hoek/commit/4d0804bc6135ad72afdc5e1ec002b935b2f5216a
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/hapijs/hoek/commit/4d0804bc6135ad72afdc5e1ec002b935b2f5216a
4
reference_url https://github.com/hapijs/hoek/commit/948baf98634a5c206875b67d11368f133034fa90
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/hapijs/hoek/commit/948baf98634a5c206875b67d11368f133034fa90
5
reference_url https://github.com/hapijs/hoek/issues/352
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-27T14:47:45Z/
url https://github.com/hapijs/hoek/issues/352
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-36604
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-36604
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2129802
reference_id 2129802
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2129802
8
reference_url https://github.com/advisories/GHSA-c429-5p7v-vgjp
reference_id GHSA-c429-5p7v-vgjp
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c429-5p7v-vgjp
9
reference_url https://security.snyk.io/vuln/SNYK-JS-HAPIHOEK-548452%29
reference_id SNYK-JS-HAPIHOEK-548452%29
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-27T14:47:45Z/
url https://security.snyk.io/vuln/SNYK-JS-HAPIHOEK-548452%29
fixed_packages
aliases CVE-2020-36604, GHSA-c429-5p7v-vgjp
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6y1e-rtjx-5kgq
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/hoek@2.0.0