Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/archivy@0.8.0
Typepypi
Namespace
Namearchivy
Version0.8.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.7.0
Latest_non_vulnerable_version1.7.1
Affected_by_vulnerabilities
0
url VCID-fsxj-tx6q-23fb
vulnerability_id VCID-fsxj-tx6q-23fb
summary archivy is vulnerable to Cross-Site Request Forgery (CSRF)
references
0
reference_url https://github.com/advisories/GHSA-9236-8w7q-rmrv
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-9236-8w7q-rmrv
1
reference_url https://github.com/archivy/archivy
reference_id
reference_type
scores
url https://github.com/archivy/archivy
2
reference_url https://github.com/archivy/archivy/commit/796c3ae318eea183fc88c87ec5a27355b0f6a99d
reference_id
reference_type
scores
url https://github.com/archivy/archivy/commit/796c3ae318eea183fc88c87ec5a27355b0f6a99d
3
reference_url https://github.com/archivy/archivy/releases/tag/v1.6.2
reference_id
reference_type
scores
url https://github.com/archivy/archivy/releases/tag/v1.6.2
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/archivy/PYSEC-2021-869.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/archivy/PYSEC-2021-869.yaml
5
reference_url https://huntr.dev/bounties/e204a768-2129-4b6f-abad-e436309c7c32
reference_id
reference_type
scores
url https://huntr.dev/bounties/e204a768-2129-4b6f-abad-e436309c7c32
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-4162
reference_id CVE-2021-4162
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-4162
fixed_packages
0
url pkg:pypi/archivy@1.6.2
purl pkg:pypi/archivy@1.6.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-yur4-b8gw-8qda
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/archivy@1.6.2
aliases CVE-2021-4162, GHSA-9236-8w7q-rmrv, PYSEC-2021-869
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fsxj-tx6q-23fb
1
url VCID-yur4-b8gw-8qda
vulnerability_id VCID-yur4-b8gw-8qda
summary Open Redirect in GitHub repository archivy/archivy prior to 1.7.0.
references
0
reference_url https://github.com/advisories/GHSA-28mg-98xm-q493
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-28mg-98xm-q493
1
reference_url https://github.com/archivy/archivy
reference_id
reference_type
scores
url https://github.com/archivy/archivy
2
reference_url https://github.com/archivy/archivy/commit/2d8cb29853190d42572b36deb61127e68d6be574
reference_id
reference_type
scores
url https://github.com/archivy/archivy/commit/2d8cb29853190d42572b36deb61127e68d6be574
3
reference_url https://github.com/archivy/archivy/releases/tag/v1.7.1
reference_id
reference_type
scores
url https://github.com/archivy/archivy/releases/tag/v1.7.1
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/archivy/PYSEC-2022-161.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/archivy/PYSEC-2022-161.yaml
5
reference_url https://huntr.dev/bounties/2d0301a2-10ff-48f4-a346-5a0e8707835b
reference_id
reference_type
scores
url https://huntr.dev/bounties/2d0301a2-10ff-48f4-a346-5a0e8707835b
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0697
reference_id CVE-2022-0697
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-0697
fixed_packages
0
url pkg:pypi/archivy@1.7.0
purl pkg:pypi/archivy@1.7.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/archivy@1.7.0
1
url pkg:pypi/archivy@1.7.1
purl pkg:pypi/archivy@1.7.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/archivy@1.7.1
aliases CVE-2022-0697, GHSA-28mg-98xm-q493, PYSEC-2022-161
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yur4-b8gw-8qda
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/archivy@0.8.0