Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/pacparser@1.4.0.dev1
Typepypi
Namespace
Namepacparser
Version1.4.0.dev1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.4.2
Latest_non_vulnerable_version1.4.2
Affected_by_vulnerabilities
0
url VCID-hkfz-s2ek-xbb7
vulnerability_id VCID-hkfz-s2ek-xbb7
summary A vulnerability classified as problematic was found in pacparser up to 1.3.x. Affected by this vulnerability is the function pacparser_find_proxy of the file src/pacparser.c. The manipulation of the argument url leads to buffer overflow. Attacking locally is a requirement. Upgrading to version 1.4.0 is able to address this issue. The name of the patch is 853e8f45607cb07b877ffd270c63dbcdd5201ad9. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-215443.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-25078
reference_id
reference_type
scores
0
value 0.0019
scoring_system epss
scoring_elements 0.40667
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-25078
1
reference_url https://github.com/manugarg/pacparser/commit/853e8f45607cb07b877ffd270c63dbcdd5201ad9
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://github.com/manugarg/pacparser/commit/853e8f45607cb07b877ffd270c63dbcdd5201ad9
2
reference_url https://github.com/manugarg/pacparser/issues/99
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://github.com/manugarg/pacparser/issues/99
3
reference_url https://github.com/manugarg/pacparser/releases/tag/v1.4.0
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://github.com/manugarg/pacparser/releases/tag/v1.4.0
4
reference_url https://vuldb.com/?id.215443
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://vuldb.com/?id.215443
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026106
reference_id 1026106
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026106
fixed_packages
0
url pkg:pypi/pacparser@1.4.0
purl pkg:pypi/pacparser@1.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-yjjr-re41-dbde
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/pacparser@1.4.0
aliases CVE-2019-25078, PYSEC-2022-43062
risk_score 3.5
exploitability 0.5
weighted_severity 7.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hkfz-s2ek-xbb7
1
url VCID-yjjr-re41-dbde
vulnerability_id VCID-yjjr-re41-dbde
summary pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL (which may be realistic within enterprise security products).
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-37360
reference_id
reference_type
scores
0
value 0.00064
scoring_system epss
scoring_elements 0.2
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-37360
1
reference_url https://github.com/manugarg/pacparser/security/advisories/GHSA-62q6-v997-f7v9
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AC:L/AV:L/A:L/C:L/I:L/PR:N/S:U/UI:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-26T16:13:44Z/
url https://github.com/manugarg/pacparser/security/advisories/GHSA-62q6-v997-f7v9
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1041425
reference_id 1041425
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1041425
fixed_packages
0
url pkg:pypi/pacparser@1.4.2
purl pkg:pypi/pacparser@1.4.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/pacparser@1.4.2
aliases CVE-2023-37360, GHSA-62q6-v997-f7v9, PYSEC-2023-93
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yjjr-re41-dbde
Fixing_vulnerabilities
Risk_score3.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/pacparser@1.4.0.dev1