{"url":"http://public2.vulnerablecode.io/api/packages/29199?format=json","purl":"pkg:pypi/rdiffweb@0.10.0","type":"pypi","namespace":"","name":"rdiffweb","version":"0.10.0","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"2.5.0a3","latest_non_vulnerable_version":"2.10.6","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36239?format=json","vulnerability_id":"VCID-1fg8-rcx8-77fq","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3274","reference_id":"","reference_type":"","scores":[{"value":"0.00683","scoring_system":"epss","scoring_elements":"0.72043","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3274"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/e974df75bdbcff3996ad70bd1b4424ec1485ea3f","reference_id":"","reference_type":"","scores":[{"value":"7.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/e974df75bdbcff3996ad70bd1b4424ec1485ea3f"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-289.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-289.yaml"},{"reference_url":"https://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f","reference_id":"","reference_type":"","scores":[{"value":"7.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3274","reference_id":"","reference_type":"","scores":[{"value":"7.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3274"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29291?format=json","purl":"pkg:pypi/rdiffweb@2.4.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.7"}],"aliases":["CVE-2022-3274","GHSA-gmj8-84r4-h46j","PYSEC-2022-289"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1fg8-rcx8-77fq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36327?format=json","vulnerability_id":"VCID-25yw-5nru-aygm","summary":"Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4314","reference_id":"","reference_type":"","scores":[{"value":"0.00448","scoring_system":"epss","scoring_elements":"0.63873","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4314"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b2df3679564d0daa2856213bb307d3e34bd89a25","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/b2df3679564d0daa2856213bb307d3e34bd89a25"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43002.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43002.yaml"},{"reference_url":"https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4314","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4314"},{"reference_url":"https://www.cve.org/CVERecord?id=CVE-2022-4314","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.cve.org/CVERecord?id=CVE-2022-4314"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/30266?format=json","purl":"pkg:pypi/rdiffweb@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.2"}],"aliases":["CVE-2022-4314","GHSA-g594-55mp-f6q8","PYSEC-2022-43002"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-25yw-5nru-aygm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36349?format=json","vulnerability_id":"VCID-287j-23ju-9fhk","summary":"Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4720","reference_id":"","reference_type":"","scores":[{"value":"0.00136","scoring_system":"epss","scoring_elements":"0.33196","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4720"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"8.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"value":"8.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d","reference_id":"","reference_type":"","scores":[{"value":"8.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"value":"8.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43006.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"value":"8.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43006.yaml"},{"reference_url":"https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70","reference_id":"","reference_type":"","scores":[{"value":"8.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"value":"8.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4720","reference_id":"","reference_type":"","scores":[{"value":"8.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"value":"8.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4720"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/31062?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-52wf-fheq-cuer"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4720","GHSA-h5wp-jrqc-cwwx","PYSEC-2022-43006"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-287j-23ju-9fhk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36246?format=json","vulnerability_id":"VCID-29xz-5wxu-ybed","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3298","reference_id":"","reference_type":"","scores":[{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.5655","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3298"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-294.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-294.yaml"},{"reference_url":"https://huntr.dev/bounties/f9fedf94-41c9-49c4-8552-e407123a44e7","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/f9fedf94-41c9-49c4-8552-e407123a44e7"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3298","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3298"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29293?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3298","GHSA-xhw9-4wqq-x67v","PYSEC-2022-294"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-29xz-5wxu-ybed"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36558?format=json","vulnerability_id":"VCID-52wf-fheq-cuer","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.","references":[{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/06f89b43469aae70e8833e55192721523f86c5a2","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/06f89b43469aae70e8833e55192721523f86c5a2"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2023-186.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2023-186.yaml"},{"reference_url":"https://huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5289","reference_id":"CVE-2023-5289","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5289"},{"reference_url":"https://github.com/advisories/GHSA-c4rv-2j6x-pq7x","reference_id":"GHSA-c4rv-2j6x-pq7x","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-c4rv-2j6x-pq7x"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/36165?format=json","purl":"pkg:pypi/rdiffweb@2.8.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.8.4"}],"aliases":["CVE-2023-5289","GHSA-c4rv-2j6x-pq7x","PYSEC-2023-186"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-52wf-fheq-cuer"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36340?format=json","vulnerability_id":"VCID-57wc-s2nn-cyeu","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4646","reference_id":"","reference_type":"","scores":[{"value":"0.00047","scoring_system":"epss","scoring_elements":"0.14751","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4646"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43004.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43004.yaml"},{"reference_url":"https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4646","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4646"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/30418?format=json","purl":"pkg:pypi/rdiffweb@2.5.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.4"}],"aliases":["CVE-2022-4646","GHSA-85fp-523q-5xwc","PYSEC-2022-43004"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-57wc-s2nn-cyeu"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36203?format=json","vulnerability_id":"VCID-5922-k3p7-pfdj","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3221","reference_id":"","reference_type":"","scores":[{"value":"0.00192","scoring_system":"epss","scoring_elements":"0.4092","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3221"},{"reference_url":"https://github.com/advisories/GHSA-vq4h-xrwc-m639","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-vq4h-xrwc-m639"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/9125f5a2d918fed0f3fc1c86fa94cd1779ed9f73","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/9125f5a2d918fed0f3fc1c86fa94cd1779ed9f73"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-278.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-278.yaml"},{"reference_url":"https://huntr.dev/bounties/1fa1aac9-b16a-4a70-a7da-960b3908ae1d","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/1fa1aac9-b16a-4a70-a7da-960b3908ae1d"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3221","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3221"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29286?format=json","purl":"pkg:pypi/rdiffweb@2.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fxxn-nnzy-97bv"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-pva4-gkpj-juh8"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tjr6-1mzd-93ee"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-z43n-dk6v-pffh"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.3"}],"aliases":["CVE-2022-3221","GHSA-vq4h-xrwc-m639","PYSEC-2022-278"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5922-k3p7-pfdj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36312?format=json","vulnerability_id":"VCID-5xg7-u3nr-nkfg","summary":"Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3362","reference_id":"","reference_type":"","scores":[{"value":"0.00358","scoring_system":"epss","scoring_elements":"0.58304","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3362"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/6efb995bc32c8a8e9ad755eb813dec991dffb2b8","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/6efb995bc32c8a8e9ad755eb813dec991dffb2b8"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43000.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43000.yaml"},{"reference_url":"https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3362","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3362"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3362","GHSA-94qm-99qc-qwqj","PYSEC-2022-43000"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5xg7-u3nr-nkfg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36347?format=json","vulnerability_id":"VCID-6zc1-xs64-1bc6","summary":"Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4724","reference_id":"","reference_type":"","scores":[{"value":"0.00248","scoring_system":"epss","scoring_elements":"0.4824","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4724"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/c4a19cf67d575c4886171b8efcbf4675d51f3929","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/c4a19cf67d575c4886171b8efcbf4675d51f3929"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43010.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43010.yaml"},{"reference_url":"https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4724","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4724"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/31062?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-52wf-fheq-cuer"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4724","GHSA-m8r9-qxx8-mrxp","PYSEC-2022-43010"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6zc1-xs64-1bc6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36195?format=json","vulnerability_id":"VCID-91jt-tgps-27b2","summary":"Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3175","reference_id":"","reference_type":"","scores":[{"value":"0.00232","scoring_system":"epss","scoring_elements":"0.46172","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3175"},{"reference_url":"https://github.com/advisories/GHSA-ch4c-278q-5654","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-ch4c-278q-5654"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/blob/4d1232cd0586eb79d1a921969f8f7a198a00d92b/README.md?plain=1#L149","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/blob/4d1232cd0586eb79d1a921969f8f7a198a00d92b/README.md?plain=1#L149"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-273.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-273.yaml"},{"reference_url":"https://huntr.dev/bounties/c40badc3-c9e7-4b69-9e2e-2b9f05865159","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/c40badc3-c9e7-4b69-9e2e-2b9f05865159"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3175","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3175"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29278?format=json","purl":"pkg:pypi/rdiffweb@2.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5922-k3p7-pfdj"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fxxn-nnzy-97bv"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-pva4-gkpj-juh8"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tjr6-1mzd-93ee"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-z43n-dk6v-pffh"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2"}],"aliases":["CVE-2022-3175","GHSA-ch4c-278q-5654","PYSEC-2022-273"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-91jt-tgps-27b2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36314?format=json","vulnerability_id":"VCID-9f5c-ne9b-27fd","summary":"Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4018","reference_id":"","reference_type":"","scores":[{"value":"0.00422","scoring_system":"epss","scoring_elements":"0.62394","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4018"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43001.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43001.yaml"},{"reference_url":"https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4018","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4018"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29462?format=json","purl":"pkg:pypi/rdiffweb@2.4.11a1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1"},{"url":"http://public2.vulnerablecode.io/api/packages/148752?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a6"}],"aliases":["CVE-2022-4018","GHSA-4wph-9vrm-6v3w","PYSEC-2022-43001"],"risk_score":1.9,"exploitability":"0.5","weighted_severity":"3.9","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-9f5c-ne9b-27fd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36244?format=json","vulnerability_id":"VCID-dpbu-gy6u-abd3","summary":"Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3272","reference_id":"","reference_type":"","scores":[{"value":"0.00433","scoring_system":"epss","scoring_elements":"0.63035","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3272"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-291.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-291.yaml"},{"reference_url":"https://huntr.com/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.com/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38"},{"reference_url":"https://huntr.dev/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38","reference_id":"","reference_type":"","scores":[],"url":"https://huntr.dev/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3272","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3272"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29293?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3272","GHSA-qrj3-hrgj-fm7r","PYSEC-2022-291"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dpbu-gy6u-abd3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36196?format=json","vulnerability_id":"VCID-e351-976k-sqak","summary":"Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3179","reference_id":"","reference_type":"","scores":[{"value":"0.00287","scoring_system":"epss","scoring_elements":"0.52375","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3179"},{"reference_url":"https://github.com/advisories/GHSA-mp5p-g2jv-r8qw","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-mp5p-g2jv-r8qw"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-272.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-272.yaml"},{"reference_url":"https://huntr.dev/bounties/58eae29e-3619-449d-9bba-fdcbabcba5fe","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/58eae29e-3619-449d-9bba-fdcbabcba5fe"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3179","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3179"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29278?format=json","purl":"pkg:pypi/rdiffweb@2.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5922-k3p7-pfdj"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fxxn-nnzy-97bv"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-pva4-gkpj-juh8"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tjr6-1mzd-93ee"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-z43n-dk6v-pffh"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2"}],"aliases":["CVE-2022-3179","GHSA-mp5p-g2jv-r8qw","PYSEC-2022-272"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-e351-976k-sqak"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36351?format=json","vulnerability_id":"VCID-ep38-eu98-fbas","summary":"Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4721","reference_id":"","reference_type":"","scores":[{"value":"0.00339","scoring_system":"epss","scoring_elements":"0.5693","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4721"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43007.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43007.yaml"},{"reference_url":"https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4721","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4721"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/31062?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-52wf-fheq-cuer"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4721","GHSA-83pm-7v48-5jp4","PYSEC-2022-43007"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ep38-eu98-fbas"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36279?format=json","vulnerability_id":"VCID-fcym-y8c1-xqdq","summary":"Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3457","reference_id":"","reference_type":"","scores":[{"value":"0.0022","scoring_system":"epss","scoring_elements":"0.44661","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3457"},{"reference_url":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/afc1bdfab5161c74012ff2590a6ec49cc0d8fde0","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/afc1bdfab5161c74012ff2590a6ec49cc0d8fde0"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43161.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43161.yaml"},{"reference_url":"https://huntr.dev/bounties/cfcab02e-d6ad-4dcf-b1b0-da90434bc55b","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/cfcab02e-d6ad-4dcf-b1b0-da90434bc55b"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3457","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3457"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/145117?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a5","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a5"},{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3457","GHSA-824x-jcxf-hpfg","PYSEC-2022-43161"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fcym-y8c1-xqdq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36204?format=json","vulnerability_id":"VCID-fxxn-nnzy-97bv","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3232","reference_id":"","reference_type":"","scores":[{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.2917","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3232"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-281.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-281.yaml"},{"reference_url":"https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3232","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3232"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29288?format=json","purl":"pkg:pypi/rdiffweb@2.4.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-pva4-gkpj-juh8"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tjr6-1mzd-93ee"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-z43n-dk6v-pffh"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.5"}],"aliases":["CVE-2022-3232","GHSA-cw2v-wv4g-w4p6","PYSEC-2022-281"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fxxn-nnzy-97bv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36350?format=json","vulnerability_id":"VCID-h6v3-24fq-3udw","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4723","reference_id":"","reference_type":"","scores":[{"value":"0.00236","scoring_system":"epss","scoring_elements":"0.46614","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4723"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/6e9ee210548f6d3210704cac302cfc7cdb239765","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/6e9ee210548f6d3210704cac302cfc7cdb239765"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43009.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43009.yaml"},{"reference_url":"https://huntr.dev/bounties/9369681b-8bfc-4146-a54c-c5108442d92c","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/9369681b-8bfc-4146-a54c-c5108442d92c"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4723","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4723"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/31062?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-52wf-fheq-cuer"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4723","GHSA-7q4r-x5qg-mmcp","PYSEC-2022-43009"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-h6v3-24fq-3udw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36191?format=json","vulnerability_id":"VCID-khum-ewzn-yfe6","summary":"Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3167","reference_id":"","reference_type":"","scores":[{"value":"0.00395","scoring_system":"epss","scoring_elements":"0.6066","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3167"},{"reference_url":"https://github.com/advisories/GHSA-m379-x4xc-38x9","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-m379-x4xc-38x9"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/7294bb7466532762c93d711211e5958940c1b428","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/7294bb7466532762c93d711211e5958940c1b428"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-268.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-268.yaml"},{"reference_url":"https://huntr.dev/bounties/e5c2625b-34cc-4805-8223-80f2689e4e5c","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/e5c2625b-34cc-4805-8223-80f2689e4e5c"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3167","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3167"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29269?format=json","purl":"pkg:pypi/rdiffweb@2.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5922-k3p7-pfdj"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-91jt-tgps-27b2"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-e351-976k-sqak"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fxxn-nnzy-97bv"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-n9ht-12n5-b7c9"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-pva4-gkpj-juh8"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tjr6-1mzd-93ee"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-z43n-dk6v-pffh"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.1"}],"aliases":["CVE-2022-3167","GHSA-m379-x4xc-38x9","PYSEC-2022-268"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-khum-ewzn-yfe6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36243?format=json","vulnerability_id":"VCID-mr71-9e9c-zbda","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3295","reference_id":"","reference_type":"","scores":[{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.5655","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3295"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-293.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-293.yaml"},{"reference_url":"https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3295","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3295"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29293?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3295","GHSA-hrj7-f62f-j7x7","PYSEC-2022-293"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mr71-9e9c-zbda"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36259?format=json","vulnerability_id":"VCID-n88y-9qre-n3bz","summary":"Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3438","reference_id":"","reference_type":"","scores":[{"value":"0.00314","scoring_system":"epss","scoring_elements":"0.5484","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3438"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/4d464b467f14b8eb9103d7f5f0774e49995527c7","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/4d464b467f14b8eb9103d7f5f0774e49995527c7"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43158.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43158.yaml"},{"reference_url":"https://huntr.dev/bounties/bc5689e4-221a-4200-a8ab-42c659f89f67","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/bc5689e4-221a-4200-a8ab-42c659f89f67"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3438","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3438"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/144524?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a4"},{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3438","GHSA-8g9m-vv69-7j99","PYSEC-2022-43158"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-n88y-9qre-n3bz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36194?format=json","vulnerability_id":"VCID-n9ht-12n5-b7c9","summary":"Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3174","reference_id":"","reference_type":"","scores":[{"value":"0.00183","scoring_system":"epss","scoring_elements":"0.39763","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3174"},{"reference_url":"https://github.com/advisories/GHSA-mjw4-xvx6-3grg","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-mjw4-xvx6-3grg"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7e","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7e"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-271.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-271.yaml"},{"reference_url":"https://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3174","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3174"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29278?format=json","purl":"pkg:pypi/rdiffweb@2.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5922-k3p7-pfdj"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fxxn-nnzy-97bv"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-pva4-gkpj-juh8"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tjr6-1mzd-93ee"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-z43n-dk6v-pffh"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2"}],"aliases":["CVE-2022-3174","GHSA-mjw4-xvx6-3grg","PYSEC-2022-271"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-n9ht-12n5-b7c9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36242?format=json","vulnerability_id":"VCID-nc4e-1muy-1kd7","summary":"Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3301","reference_id":"","reference_type":"","scores":[{"value":"0.00267","scoring_system":"epss","scoring_elements":"0.50385","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3301"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"2.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e","reference_id":"","reference_type":"","scores":[{"value":"2.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-295.yaml","reference_id":"","reference_type":"","scores":[{"value":"2.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-295.yaml"},{"reference_url":"https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a","reference_id":"","reference_type":"","scores":[{"value":"2.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3301","reference_id":"","reference_type":"","scores":[{"value":"2.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3301"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29293?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3301","GHSA-qq29-5vjh-vxwr","PYSEC-2022-295"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-nc4e-1muy-1kd7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36287?format=json","vulnerability_id":"VCID-ps4e-cg34-wyah","summary":"Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3363","reference_id":"","reference_type":"","scores":[{"value":"0.00492","scoring_system":"epss","scoring_elements":"0.65997","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3363"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42978.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42978.yaml"},{"reference_url":"https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3363","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3363"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29469?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a7"},{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3363","GHSA-jw36-mrvg-j5fx","PYSEC-2022-42978"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ps4e-cg34-wyah"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36236?format=json","vulnerability_id":"VCID-pva4-gkpj-juh8","summary":"Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3250","reference_id":"","reference_type":"","scores":[{"value":"0.00371","scoring_system":"epss","scoring_elements":"0.59196","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3250"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/ac334dd27ceadac0661b1e2e059a8423433c3fee","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/ac334dd27ceadac0661b1e2e059a8423433c3fee"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-287.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-287.yaml"},{"reference_url":"https://huntr.dev/bounties/39889a3f-8bb7-448a-b0d4-a18c671bbd23","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/39889a3f-8bb7-448a-b0d4-a18c671bbd23"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3250","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3250"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29290?format=json","purl":"pkg:pypi/rdiffweb@2.4.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6"}],"aliases":["CVE-2022-3250","GHSA-m748-hjqg-rpp8","PYSEC-2022-287"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pva4-gkpj-juh8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36346?format=json","vulnerability_id":"VCID-qcsd-5htt-h3ev","summary":"Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4722","reference_id":"","reference_type":"","scores":[{"value":"0.00164","scoring_system":"epss","scoring_elements":"0.37055","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4722"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/d1aaa96b665a39fba9e98d6054a9de511ba0a837","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/d1aaa96b665a39fba9e98d6054a9de511ba0a837"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43008.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43008.yaml"},{"reference_url":"https://huntr.dev/bounties/c62126dc-d9a6-4d3e-988d-967031876c58","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/c62126dc-d9a6-4d3e-988d-967031876c58"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4722","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4722"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/31062?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-52wf-fheq-cuer"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4722","GHSA-wf33-6x33-wcf9","PYSEC-2022-43008"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qcsd-5htt-h3ev"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36280?format=json","vulnerability_id":"VCID-rynh-v7q5-6kdg","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3439","reference_id":"","reference_type":"","scores":[{"value":"0.00509","scoring_system":"epss","scoring_elements":"0.66698","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3439"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43159.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43159.yaml"},{"reference_url":"https://huntr.dev/bounties/37b86c45-b240-4626-bd53-b6f02d10e0d7","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/37b86c45-b240-4626-bd53-b6f02d10e0d7"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3439","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3439"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3439","GHSA-x8x2-wc2h-wc48","PYSEC-2022-43159"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rynh-v7q5-6kdg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36257?format=json","vulnerability_id":"VCID-sn4z-f439-6qe7","summary":"Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3376","reference_id":"","reference_type":"","scores":[{"value":"0.00489","scoring_system":"epss","scoring_elements":"0.65843","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3376"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/2ffc2af65c8f8113b06e0b89929c604bcdf844b9","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/2ffc2af65c8f8113b06e0b89929c604bcdf844b9"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43157.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43157.yaml"},{"reference_url":"https://huntr.dev/bounties/a9021e93-6d18-4ac1-98ce-550c4697a4ed","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/a9021e93-6d18-4ac1-98ce-550c4697a4ed"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3376","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3376"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29462?format=json","purl":"pkg:pypi/rdiffweb@2.4.11a1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1"},{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3376","GHSA-7wr6-fj4x-893v","PYSEC-2022-43157"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-sn4z-f439-6qe7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36240?format=json","vulnerability_id":"VCID-t1sj-158f-efey","summary":"Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3269","reference_id":"","reference_type":"","scores":[{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.58201","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3269"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/39e7dcd4a1f44d2a7bd92b79d78a800910b1b22b","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/39e7dcd4a1f44d2a7bd92b79d78a800910b1b22b"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-290.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-290.yaml"},{"reference_url":"https://huntr.dev/bounties/67c25969-5e7a-4424-817e-e1a918f63cc6","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/67c25969-5e7a-4424-817e-e1a918f63cc6"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3269","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3269"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29291?format=json","purl":"pkg:pypi/rdiffweb@2.4.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.7"}],"aliases":["CVE-2022-3269","GHSA-j3q4-gmj4-mj95","PYSEC-2022-290"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-t1sj-158f-efey"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36237?format=json","vulnerability_id":"VCID-tjr6-1mzd-93ee","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3233","reference_id":"","reference_type":"","scores":[{"value":"0.0013","scoring_system":"epss","scoring_elements":"0.32055","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3233"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/18a5aabd48fa6d2d2771a25f95610c28a1a097ca","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/18a5aabd48fa6d2d2771a25f95610c28a1a097ca"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-285.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-285.yaml"},{"reference_url":"https://huntr.dev/bounties/5ec206e0-eca0-4957-9af4-fdd9185d1db3","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/5ec206e0-eca0-4957-9af4-fdd9185d1db3"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3233","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3233"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29290?format=json","purl":"pkg:pypi/rdiffweb@2.4.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6"}],"aliases":["CVE-2022-3233","GHSA-9vxf-mcm6-5m42","PYSEC-2022-285"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tjr6-1mzd-93ee"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36339?format=json","vulnerability_id":"VCID-tv4c-g8r6-xbf6","summary":"Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4644","reference_id":"","reference_type":"","scores":[{"value":"0.00185","scoring_system":"epss","scoring_elements":"0.3994","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4644"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/5f861670ef8f38ca8eea52a98672d0e0fabb5368","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/5f861670ef8f38ca8eea52a98672d0e0fabb5368"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43003.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43003.yaml"},{"reference_url":"https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4644","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4644"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/30418?format=json","purl":"pkg:pypi/rdiffweb@2.5.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.4"}],"aliases":["CVE-2022-4644","GHSA-639f-hxcv-84mc","PYSEC-2022-43003"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tv4c-g8r6-xbf6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36245?format=json","vulnerability_id":"VCID-vmrb-sm2h-hqf1","summary":"Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3290","reference_id":"","reference_type":"","scores":[{"value":"0.00299","scoring_system":"epss","scoring_elements":"0.53557","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3290"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-292.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-292.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43184.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43184.yaml"},{"reference_url":"https://huntr.dev/bounties/d8b8519d-96a5-484c-8141-624c54290bf5","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/d8b8519d-96a5-484c-8141-624c54290bf5"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3290","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3290"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29293?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3290","GHSA-5v95-j4rr-6f3c","PYSEC-2022-292","PYSEC-2022-43184"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vmrb-sm2h-hqf1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36348?format=json","vulnerability_id":"VCID-wyn5-w4qh-nfht","summary":"Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4719","reference_id":"","reference_type":"","scores":[{"value":"0.00422","scoring_system":"epss","scoring_elements":"0.62394","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4719"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43005.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43005.yaml"},{"reference_url":"https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4719","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4719"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/31062?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-52wf-fheq-cuer"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4719","GHSA-2wpw-cm9w-v4xm","PYSEC-2022-43005"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wyn5-w4qh-nfht"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36278?format=json","vulnerability_id":"VCID-yssm-eyx3-efhs","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3456","reference_id":"","reference_type":"","scores":[{"value":"0.00316","scoring_system":"epss","scoring_elements":"0.54954","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3456"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43160.yaml","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43160.yaml"},{"reference_url":"https://huntr.dev/bounties/b34412ca-50c5-4615-b7e3-5d07d33acfce","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/b34412ca-50c5-4615-b7e3-5d07d33acfce"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3456","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3456"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3456","GHSA-92gf-p376-6r9r","PYSEC-2022-43160"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yssm-eyx3-efhs"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36283?format=json","vulnerability_id":"VCID-yz9x-nz9u-wybe","summary":"Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3327","reference_id":"","reference_type":"","scores":[{"value":"0.0033","scoring_system":"epss","scoring_elements":"0.5622","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3327"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42977.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42977.yaml"},{"reference_url":"https://gitlab.com/ikus-soft/rdiffweb#next-release-250","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://gitlab.com/ikus-soft/rdiffweb#next-release-250"},{"reference_url":"https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3327","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3327"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29295?format=json","purl":"pkg:pypi/rdiffweb@2.4.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10"},{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3327","GHSA-99j5-fvg3-54pm","PYSEC-2022-42977"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yz9x-nz9u-wybe"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36238?format=json","vulnerability_id":"VCID-z43n-dk6v-pffh","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3267","reference_id":"","reference_type":"","scores":[{"value":"0.00169","scoring_system":"epss","scoring_elements":"0.37825","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3267"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-284.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-284.yaml"},{"reference_url":"https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3267","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3267"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29290?format=json","purl":"pkg:pypi/rdiffweb@2.4.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6"}],"aliases":["CVE-2022-3267","GHSA-74j6-3hh4-w3f5","PYSEC-2022-284"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-z43n-dk6v-pffh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36256?format=json","vulnerability_id":"VCID-zzjz-9wv2-vfcc","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3273","reference_id":"","reference_type":"","scores":[{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.41775","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3273"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43156.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43156.yaml"},{"reference_url":"https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3273","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3273"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29462?format=json","purl":"pkg:pypi/rdiffweb@2.4.11a1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1"},{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3273","GHSA-9g3v-v24q-jj5p","PYSEC-2022-43156"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zzjz-9wv2-vfcc"}],"fixing_vulnerabilities":[],"risk_score":"4.5","resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@0.10.0"}