Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/net.sourceforge.pmd/pmd@5.2.1
Typemaven
Namespacenet.sourceforge.pmd
Namepmd
Version5.2.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version6.0.0
Latest_non_vulnerable_version6.0.0
Affected_by_vulnerabilities
0
url VCID-frtg-nj69-aych
vulnerability_id VCID-frtg-nj69-aych
summary 
Improper Restriction of XML External Entity Reference
PMD processes XML external entities in ruleset files it parses as part of the analysis process, allowing attackers tampering it (either by direct modification or MITM attacks when using remote rulesets) to perform information disclosure, denial of service, or request forgery attacks.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-7722
reference_id
reference_type
scores
0
value 0.00451
scoring_system epss
scoring_elements 0.6403
published_at 2026-06-04T12:55:00Z
1
value 0.00451
scoring_system epss
scoring_elements 0.64071
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-7722
1
reference_url https://github.com/pmd/pmd
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pmd/pmd
2
reference_url https://github.com/pmd/pmd/issues/1650
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pmd/pmd/issues/1650
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-7722
reference_id CVE-2019-7722
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-7722
4
reference_url https://github.com/advisories/GHSA-57qj-79gh-69w8
reference_id GHSA-57qj-79gh-69w8
reference_type
scores
url https://github.com/advisories/GHSA-57qj-79gh-69w8
fixed_packages
0
url pkg:maven/net.sourceforge.pmd/pmd@6.0.0
purl pkg:maven/net.sourceforge.pmd/pmd@6.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.sourceforge.pmd/pmd@6.0.0
aliases CVE-2019-7722, GHSA-57qj-79gh-69w8
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-frtg-nj69-aych
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/net.sourceforge.pmd/pmd@5.2.1