Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/aim@2.0.22rc3
Typepypi
Namespace
Nameaim
Version2.0.22rc3
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.1.0
Latest_non_vulnerable_version3.1.0
Affected_by_vulnerabilities
0
url VCID-safj-r9a5-1kdd
vulnerability_id VCID-safj-r9a5-1kdd
summary Aim is an open-source, self-hosted machine learning experiment tracking tool. Versions of Aim prior to 3.1.0 are vulnerable to a path traversal attack. By manipulating variables that reference files with “dot-dot-slash (../)� sequences and its variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on file system including application source code or configuration and critical system files. The vulnerability issue is resolved in Aim v3.1.0.
references
0
reference_url https://github.com/aimhubio/aim
reference_id
reference_type
scores
url https://github.com/aimhubio/aim
1
reference_url https://github.com/aimhubio/aim/blob/0b99c6ca08e0ba7e7011453a2f68033e9b1d1bce/aim/web/api/views.py#L9-L16
reference_id
reference_type
scores
url https://github.com/aimhubio/aim/blob/0b99c6ca08e0ba7e7011453a2f68033e9b1d1bce/aim/web/api/views.py#L9-L16
2
reference_url https://github.com/aimhubio/aim/commit/b9e53df5e32d14bbd3a2c738e2db7187fb531e93
reference_id
reference_type
scores
url https://github.com/aimhubio/aim/commit/b9e53df5e32d14bbd3a2c738e2db7187fb531e93
3
reference_url https://github.com/aimhubio/aim/issues/999
reference_id
reference_type
scores
url https://github.com/aimhubio/aim/issues/999
4
reference_url https://github.com/aimhubio/aim/pull/1003
reference_id
reference_type
scores
url https://github.com/aimhubio/aim/pull/1003
5
reference_url https://github.com/aimhubio/aim/pull/1003/commits/f01266a1a479ef11d7d6c539e7dd89e9d5639738
reference_id
reference_type
scores
url https://github.com/aimhubio/aim/pull/1003/commits/f01266a1a479ef11d7d6c539e7dd89e9d5639738
6
reference_url https://github.com/aimhubio/aim/security/advisories/GHSA-8phj-f9w2-cjcc
reference_id
reference_type
scores
url https://github.com/aimhubio/aim/security/advisories/GHSA-8phj-f9w2-cjcc
7
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/aim/PYSEC-2021-839.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/aim/PYSEC-2021-839.yaml
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-43775
reference_id CVE-2021-43775
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-43775
9
reference_url https://github.com/advisories/GHSA-8phj-f9w2-cjcc
reference_id GHSA-8phj-f9w2-cjcc
reference_type
scores
url https://github.com/advisories/GHSA-8phj-f9w2-cjcc
fixed_packages
0
url pkg:pypi/aim@3.1.0
purl pkg:pypi/aim@3.1.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/aim@3.1.0
aliases CVE-2021-43775, GHSA-8phj-f9w2-cjcc, PYSEC-2021-839
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-safj-r9a5-1kdd
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/aim@2.0.22rc3