{"url":"http://public2.vulnerablecode.io/api/packages/29213?format=json","purl":"pkg:pypi/rdiffweb@1.0.1","type":"pypi","namespace":"","name":"rdiffweb","version":"1.0.1","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"2.10.6","latest_non_vulnerable_version":"2.10.6","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36239?format=json","vulnerability_id":"VCID-1fg8-rcx8-77fq","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3274","reference_id":"","reference_type":"","scores":[{"value":"0.00683","scoring_system":"epss","scoring_elements":"0.72043","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00683","scoring_system":"epss","scoring_elements":"0.7208","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00683","scoring_system":"epss","scoring_elements":"0.72055","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00683","scoring_system":"epss","scoring_elements":"0.72068","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00683","scoring_system":"epss","scoring_elements":"0.72091","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00683","scoring_system":"epss","scoring_elements":"0.72083","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3274"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/e974df75bdbcff3996ad70bd1b4424ec1485ea3f","reference_id":"","reference_type":"","scores":[{"value":"7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H"},{"value":"7.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-22T16:00:42Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/e974df75bdbcff3996ad70bd1b4424ec1485ea3f"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-289.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-289.yaml"},{"reference_url":"https://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f","reference_id":"","reference_type":"","scores":[{"value":"7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H"},{"value":"7.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-22T16:00:42Z/"}],"url":"https://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3274","reference_id":"","reference_type":"","scores":[{"value":"7.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3274"},{"reference_url":"https://github.com/advisories/GHSA-gmj8-84r4-h46j","reference_id":"GHSA-gmj8-84r4-h46j","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-gmj8-84r4-h46j"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29291?format=json","purl":"pkg:pypi/rdiffweb@2.4.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.7"}],"aliases":["CVE-2022-3274","GHSA-gmj8-84r4-h46j","PYSEC-2022-289"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1fg8-rcx8-77fq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36327?format=json","vulnerability_id":"VCID-25yw-5nru-aygm","summary":"Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4314","reference_id":"","reference_type":"","scores":[{"value":"0.00448","scoring_system":"epss","scoring_elements":"0.63913","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00448","scoring_system":"epss","scoring_elements":"0.6392","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00448","scoring_system":"epss","scoring_elements":"0.63901","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00448","scoring_system":"epss","scoring_elements":"0.63873","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00448","scoring_system":"epss","scoring_elements":"0.63916","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00448","scoring_system":"epss","scoring_elements":"0.63922","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4314"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b2df3679564d0daa2856213bb307d3e34bd89a25","reference_id":"","reference_type":"","scores":[{"value":"6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T17:42:41Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/b2df3679564d0daa2856213bb307d3e34bd89a25"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43002.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43002.yaml"},{"reference_url":"https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8","reference_id":"","reference_type":"","scores":[{"value":"6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T17:42:41Z/"}],"url":"https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4314","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4314"},{"reference_url":"https://www.cve.org/CVERecord?id=CVE-2022-4314","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.cve.org/CVERecord?id=CVE-2022-4314"},{"reference_url":"https://github.com/advisories/GHSA-g594-55mp-f6q8","reference_id":"GHSA-g594-55mp-f6q8","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-g594-55mp-f6q8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/30266?format=json","purl":"pkg:pypi/rdiffweb@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.2"}],"aliases":["CVE-2022-4314","GHSA-g594-55mp-f6q8","PYSEC-2022-43002"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-25yw-5nru-aygm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36349?format=json","vulnerability_id":"VCID-287j-23ju-9fhk","summary":"Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4720","reference_id":"","reference_type":"","scores":[{"value":"0.00136","scoring_system":"epss","scoring_elements":"0.33299","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00136","scoring_system":"epss","scoring_elements":"0.33266","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00136","scoring_system":"epss","scoring_elements":"0.33246","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00136","scoring_system":"epss","scoring_elements":"0.33278","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00136","scoring_system":"epss","scoring_elements":"0.33196","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00136","scoring_system":"epss","scoring_elements":"0.33314","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4720"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"8.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"value":"8.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L"},{"value":"8.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"value":"8.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:48:42Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43006.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"value":"8.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43006.yaml"},{"reference_url":"https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L"},{"value":"8.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"value":"8.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:48:42Z/"}],"url":"https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4720","reference_id":"","reference_type":"","scores":[{"value":"8.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"value":"8.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4720"},{"reference_url":"https://github.com/advisories/GHSA-h5wp-jrqc-cwwx","reference_id":"GHSA-h5wp-jrqc-cwwx","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-h5wp-jrqc-cwwx"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/31062?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-5k13-n5su-sqce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4720","GHSA-h5wp-jrqc-cwwx","PYSEC-2022-43006"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-287j-23ju-9fhk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36246?format=json","vulnerability_id":"VCID-29xz-5wxu-ybed","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3298","reference_id":"","reference_type":"","scores":[{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56601","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.5655","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56603","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56609","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56598","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56583","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3298"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-21T15:33:02Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-294.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-294.yaml"},{"reference_url":"https://huntr.dev/bounties/f9fedf94-41c9-49c4-8552-e407123a44e7","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-21T15:33:02Z/"}],"url":"https://huntr.dev/bounties/f9fedf94-41c9-49c4-8552-e407123a44e7"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3298","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3298"},{"reference_url":"https://github.com/advisories/GHSA-xhw9-4wqq-x67v","reference_id":"GHSA-xhw9-4wqq-x67v","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-xhw9-4wqq-x67v"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29293?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3298","GHSA-xhw9-4wqq-x67v","PYSEC-2022-294"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-29xz-5wxu-ybed"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/93689?format=json","vulnerability_id":"VCID-2n1n-8nzg-xuh3","summary":"IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users\nIKUS Rdiffweb version 2.10.5 and below have an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authenticated subject and the targeted user/tenant, so crafted requests can read or modify other users data and, in some cases, perform privileged actions. This issue may enable cross-tenant access. Fixed in version 2.10.6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-67796","reference_id":"","reference_type":"","scores":[{"value":"0.00035","scoring_system":"epss","scoring_elements":"0.10539","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00035","scoring_system":"epss","scoring_elements":"0.10561","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00035","scoring_system":"epss","scoring_elements":"0.10624","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00035","scoring_system":"epss","scoring_elements":"0.10662","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00035","scoring_system":"epss","scoring_elements":"0.10638","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-67796"},{"reference_url":"https://gitlab.com/ikus-soft/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-05T15:06:50Z/"}],"url":"https://gitlab.com/ikus-soft/rdiffweb"},{"reference_url":"https://gitlab.com/ikus-soft/rdiffweb#2106-2025-10-02","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-05T15:06:50Z/"}],"url":"https://gitlab.com/ikus-soft/rdiffweb#2106-2025-10-02"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-67796","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-67796"},{"reference_url":"https://github.com/advisories/GHSA-v4gp-hf5j-4566","reference_id":"GHSA-v4gp-hf5j-4566","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-v4gp-hf5j-4566"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/117022?format=json","purl":"pkg:pypi/rdiffweb@2.10.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.10.6"}],"aliases":["CVE-2025-67796","GHSA-v4gp-hf5j-4566"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2n1n-8nzg-xuh3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36558?format=json","vulnerability_id":"VCID-52wf-fheq-cuer","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-5289","reference_id":"","reference_type":"","scores":[{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22904","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.23016","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22908","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22957","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.23001","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-5289"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/06f89b43469aae70e8833e55192721523f86c5a2","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-23T17:12:56Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/06f89b43469aae70e8833e55192721523f86c5a2"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2023-186.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2023-186.yaml"},{"reference_url":"https://huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-23T17:12:56Z/"}],"url":"https://huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5289","reference_id":"CVE-2023-5289","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5289"},{"reference_url":"https://github.com/advisories/GHSA-c4rv-2j6x-pq7x","reference_id":"GHSA-c4rv-2j6x-pq7x","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-c4rv-2j6x-pq7x"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/36165?format=json","purl":"pkg:pypi/rdiffweb@2.8.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n1n-8nzg-xuh3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.8.4"}],"aliases":["CVE-2023-5289","GHSA-c4rv-2j6x-pq7x","PYSEC-2023-186"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-52wf-fheq-cuer"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36340?format=json","vulnerability_id":"VCID-57wc-s2nn-cyeu","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4646","reference_id":"","reference_type":"","scores":[{"value":"0.00047","scoring_system":"epss","scoring_elements":"0.14838","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00047","scoring_system":"epss","scoring_elements":"0.1473","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00047","scoring_system":"epss","scoring_elements":"0.14709","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00047","scoring_system":"epss","scoring_elements":"0.14792","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00047","scoring_system":"epss","scoring_elements":"0.14751","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00047","scoring_system":"epss","scoring_elements":"0.14834","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4646"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T18:19:10Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43004.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43004.yaml"},{"reference_url":"https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T18:19:10Z/"}],"url":"https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4646","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4646"},{"reference_url":"https://github.com/advisories/GHSA-85fp-523q-5xwc","reference_id":"GHSA-85fp-523q-5xwc","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-85fp-523q-5xwc"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/30418?format=json","purl":"pkg:pypi/rdiffweb@2.5.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.4"}],"aliases":["CVE-2022-4646","GHSA-85fp-523q-5xwc","PYSEC-2022-43004"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-57wc-s2nn-cyeu"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36203?format=json","vulnerability_id":"VCID-5922-k3p7-pfdj","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3221","reference_id":"","reference_type":"","scores":[{"value":"0.00192","scoring_system":"epss","scoring_elements":"0.4097","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00192","scoring_system":"epss","scoring_elements":"0.4095","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00192","scoring_system":"epss","scoring_elements":"0.40939","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00192","scoring_system":"epss","scoring_elements":"0.4092","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00192","scoring_system":"epss","scoring_elements":"0.41001","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00192","scoring_system":"epss","scoring_elements":"0.40997","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3221"},{"reference_url":"https://github.com/advisories/GHSA-vq4h-xrwc-m639","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-vq4h-xrwc-m639"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/9125f5a2d918fed0f3fc1c86fa94cd1779ed9f73","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/9125f5a2d918fed0f3fc1c86fa94cd1779ed9f73"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-278.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-278.yaml"},{"reference_url":"https://huntr.dev/bounties/1fa1aac9-b16a-4a70-a7da-960b3908ae1d","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/1fa1aac9-b16a-4a70-a7da-960b3908ae1d"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3221","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3221"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29286?format=json","purl":"pkg:pypi/rdiffweb@2.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-fxxn-nnzy-97bv"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-pva4-gkpj-juh8"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tjr6-1mzd-93ee"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-z43n-dk6v-pffh"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.3"}],"aliases":["CVE-2022-3221","GHSA-vq4h-xrwc-m639","PYSEC-2022-278"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5922-k3p7-pfdj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/45778?format=json","vulnerability_id":"VCID-5k13-n5su-sqce","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-4138","reference_id":"","reference_type":"","scores":[{"value":"0.00089","scoring_system":"epss","scoring_elements":"0.25326","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00089","scoring_system":"epss","scoring_elements":"0.25335","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00089","scoring_system":"epss","scoring_elements":"0.25384","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00089","scoring_system":"epss","scoring_elements":"0.25432","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00089","scoring_system":"epss","scoring_elements":"0.25446","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-4138"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/feef0d7b11d86aed29bf98c21526088117964d85","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"},{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-11T18:15:42Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/feef0d7b11d86aed29bf98c21526088117964d85"},{"reference_url":"https://huntr.dev/bounties/1b1fa915-d588-4bb1-9e82-6a6be79befed","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"},{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-11T18:15:42Z/"}],"url":"https://huntr.dev/bounties/1b1fa915-d588-4bb1-9e82-6a6be79befed"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4138","reference_id":"CVE-2023-4138","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4138"},{"reference_url":"https://github.com/advisories/GHSA-wwrg-2w5j-grvx","reference_id":"GHSA-wwrg-2w5j-grvx","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-wwrg-2w5j-grvx"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/36161?format=json","purl":"pkg:pypi/rdiffweb@2.8.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.8.1"}],"aliases":["CVE-2023-4138","GHSA-wwrg-2w5j-grvx"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5k13-n5su-sqce"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36312?format=json","vulnerability_id":"VCID-5xg7-u3nr-nkfg","summary":"Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3362","reference_id":"","reference_type":"","scores":[{"value":"0.00358","scoring_system":"epss","scoring_elements":"0.58304","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00358","scoring_system":"epss","scoring_elements":"0.5836","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00358","scoring_system":"epss","scoring_elements":"0.58351","published_at":"2026-06-07T12:55:00Z"},{"value":"0.0041","scoring_system":"epss","scoring_elements":"0.61679","published_at":"2026-06-08T12:55:00Z"},{"value":"0.0041","scoring_system":"epss","scoring_elements":"0.61697","published_at":"2026-06-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3362"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/6efb995bc32c8a8e9ad755eb813dec991dffb2b8","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-30T17:48:18Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/6efb995bc32c8a8e9ad755eb813dec991dffb2b8"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43000.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43000.yaml"},{"reference_url":"https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-30T17:48:18Z/"}],"url":"https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3362","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3362"},{"reference_url":"https://github.com/advisories/GHSA-94qm-99qc-qwqj","reference_id":"GHSA-94qm-99qc-qwqj","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-94qm-99qc-qwqj"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3362","GHSA-94qm-99qc-qwqj","PYSEC-2022-43000"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5xg7-u3nr-nkfg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36347?format=json","vulnerability_id":"VCID-6zc1-xs64-1bc6","summary":"Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4724","reference_id":"","reference_type":"","scores":[{"value":"0.00237","scoring_system":"epss","scoring_elements":"0.46965","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00237","scoring_system":"epss","scoring_elements":"0.46947","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00237","scoring_system":"epss","scoring_elements":"0.46937","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00237","scoring_system":"epss","scoring_elements":"0.46983","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00248","scoring_system":"epss","scoring_elements":"0.48302","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00248","scoring_system":"epss","scoring_elements":"0.4824","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4724"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/c4a19cf67d575c4886171b8efcbf4675d51f3929","reference_id":"","reference_type":"","scores":[{"value":"8.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:16:04Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/c4a19cf67d575c4886171b8efcbf4675d51f3929"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43010.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43010.yaml"},{"reference_url":"https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445","reference_id":"","reference_type":"","scores":[{"value":"8.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:16:04Z/"}],"url":"https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4724","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4724"},{"reference_url":"https://github.com/advisories/GHSA-m8r9-qxx8-mrxp","reference_id":"GHSA-m8r9-qxx8-mrxp","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-m8r9-qxx8-mrxp"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/31062?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-5k13-n5su-sqce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4724","GHSA-m8r9-qxx8-mrxp","PYSEC-2022-43010"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6zc1-xs64-1bc6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36195?format=json","vulnerability_id":"VCID-91jt-tgps-27b2","summary":"Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3175","reference_id":"","reference_type":"","scores":[{"value":"0.00232","scoring_system":"epss","scoring_elements":"0.46172","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00232","scoring_system":"epss","scoring_elements":"0.46207","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00232","scoring_system":"epss","scoring_elements":"0.46195","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00232","scoring_system":"epss","scoring_elements":"0.46222","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00232","scoring_system":"epss","scoring_elements":"0.46242","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00232","scoring_system":"epss","scoring_elements":"0.4624","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3175"},{"reference_url":"https://github.com/advisories/GHSA-ch4c-278q-5654","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-ch4c-278q-5654"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/blob/4d1232cd0586eb79d1a921969f8f7a198a00d92b/README.md?plain=1#L149","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/blob/4d1232cd0586eb79d1a921969f8f7a198a00d92b/README.md?plain=1#L149"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-273.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-273.yaml"},{"reference_url":"https://huntr.dev/bounties/c40badc3-c9e7-4b69-9e2e-2b9f05865159","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/c40badc3-c9e7-4b69-9e2e-2b9f05865159"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3175","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3175"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29278?format=json","purl":"pkg:pypi/rdiffweb@2.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5922-k3p7-pfdj"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-fxxn-nnzy-97bv"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-pva4-gkpj-juh8"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tjr6-1mzd-93ee"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-z43n-dk6v-pffh"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2"}],"aliases":["CVE-2022-3175","GHSA-ch4c-278q-5654","PYSEC-2022-273"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-91jt-tgps-27b2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36314?format=json","vulnerability_id":"VCID-9f5c-ne9b-27fd","summary":"Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4018","reference_id":"","reference_type":"","scores":[{"value":"0.00422","scoring_system":"epss","scoring_elements":"0.62394","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00422","scoring_system":"epss","scoring_elements":"0.62423","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00422","scoring_system":"epss","scoring_elements":"0.62438","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00422","scoring_system":"epss","scoring_elements":"0.62439","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00422","scoring_system":"epss","scoring_elements":"0.62448","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4018"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T18:19:15Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43001.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43001.yaml"},{"reference_url":"https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T18:19:15Z/"}],"url":"https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4018","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4018"},{"reference_url":"https://github.com/advisories/GHSA-4wph-9vrm-6v3w","reference_id":"GHSA-4wph-9vrm-6v3w","reference_type":"","scores":[{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-4wph-9vrm-6v3w"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29462?format=json","purl":"pkg:pypi/rdiffweb@2.4.11a1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1"},{"url":"http://public2.vulnerablecode.io/api/packages/148752?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a6"},{"url":"http://public2.vulnerablecode.io/api/packages/29469?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a7"}],"aliases":["CVE-2022-4018","GHSA-4wph-9vrm-6v3w","PYSEC-2022-43001"],"risk_score":2.8,"exploitability":"0.5","weighted_severity":"5.5","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-9f5c-ne9b-27fd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36248?format=json","vulnerability_id":"VCID-btgq-2yaz-abdd","summary":"Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3326","reference_id":"","reference_type":"","scores":[{"value":"0.00189","scoring_system":"epss","scoring_elements":"0.40518","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00189","scoring_system":"epss","scoring_elements":"0.40559","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00189","scoring_system":"epss","scoring_elements":"0.40545","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00189","scoring_system":"epss","scoring_elements":"0.40575","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00189","scoring_system":"epss","scoring_elements":"0.40601","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00189","scoring_system":"epss","scoring_elements":"0.40597","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3326"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/ee98e5af78ec60db8a17fef6ea0ca250e3f31eec","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T20:22:21Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/ee98e5af78ec60db8a17fef6ea0ca250e3f31eec"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-297.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-297.yaml"},{"reference_url":"https://huntr.dev/bounties/1f6a5e49-23f2-45f7-8661-19f9cee8ae97","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T20:22:21Z/"}],"url":"https://huntr.dev/bounties/1f6a5e49-23f2-45f7-8661-19f9cee8ae97"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3326","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3326"},{"reference_url":"https://github.com/advisories/GHSA-8wxf-c45w-g66g","reference_id":"GHSA-8wxf-c45w-g66g","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-8wxf-c45w-g66g"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29294?format=json","purl":"pkg:pypi/rdiffweb@2.4.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.9"}],"aliases":["CVE-2022-3326","GHSA-8wxf-c45w-g66g","PYSEC-2022-297"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-btgq-2yaz-abdd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36244?format=json","vulnerability_id":"VCID-dpbu-gy6u-abd3","summary":"Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3272","reference_id":"","reference_type":"","scores":[{"value":"0.00433","scoring_system":"epss","scoring_elements":"0.63081","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00433","scoring_system":"epss","scoring_elements":"0.63035","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00433","scoring_system":"epss","scoring_elements":"0.63079","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00433","scoring_system":"epss","scoring_elements":"0.63088","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00433","scoring_system":"epss","scoring_elements":"0.63078","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00433","scoring_system":"epss","scoring_elements":"0.63064","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3272"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-21T15:12:53Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-291.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-291.yaml"},{"reference_url":"https://huntr.com/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.com/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38"},{"reference_url":"https://huntr.dev/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-21T15:12:53Z/"}],"url":"https://huntr.dev/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3272","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3272"},{"reference_url":"https://github.com/advisories/GHSA-qrj3-hrgj-fm7r","reference_id":"GHSA-qrj3-hrgj-fm7r","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-qrj3-hrgj-fm7r"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29293?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3272","GHSA-qrj3-hrgj-fm7r","PYSEC-2022-291"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dpbu-gy6u-abd3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36196?format=json","vulnerability_id":"VCID-e351-976k-sqak","summary":"Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3179","reference_id":"","reference_type":"","scores":[{"value":"0.00287","scoring_system":"epss","scoring_elements":"0.52375","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00287","scoring_system":"epss","scoring_elements":"0.52416","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00287","scoring_system":"epss","scoring_elements":"0.52395","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00287","scoring_system":"epss","scoring_elements":"0.52423","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00287","scoring_system":"epss","scoring_elements":"0.52443","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00287","scoring_system":"epss","scoring_elements":"0.52435","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3179"},{"reference_url":"https://github.com/advisories/GHSA-mp5p-g2jv-r8qw","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-mp5p-g2jv-r8qw"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-272.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-272.yaml"},{"reference_url":"https://huntr.dev/bounties/58eae29e-3619-449d-9bba-fdcbabcba5fe","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/58eae29e-3619-449d-9bba-fdcbabcba5fe"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3179","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3179"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29278?format=json","purl":"pkg:pypi/rdiffweb@2.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5922-k3p7-pfdj"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-fxxn-nnzy-97bv"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-pva4-gkpj-juh8"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tjr6-1mzd-93ee"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-z43n-dk6v-pffh"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2"}],"aliases":["CVE-2022-3179","GHSA-mp5p-g2jv-r8qw","PYSEC-2022-272"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-e351-976k-sqak"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36351?format=json","vulnerability_id":"VCID-ep38-eu98-fbas","summary":"Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4721","reference_id":"","reference_type":"","scores":[{"value":"0.00132","scoring_system":"epss","scoring_elements":"0.32229","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00132","scoring_system":"epss","scoring_elements":"0.32206","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00132","scoring_system":"epss","scoring_elements":"0.32236","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00132","scoring_system":"epss","scoring_elements":"0.32274","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00339","scoring_system":"epss","scoring_elements":"0.56981","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00339","scoring_system":"epss","scoring_elements":"0.5693","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4721"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d","reference_id":"","reference_type":"","scores":[{"value":"6.6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H"},{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:47:29Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43007.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43007.yaml"},{"reference_url":"https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720","reference_id":"","reference_type":"","scores":[{"value":"6.6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H"},{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:47:29Z/"}],"url":"https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4721","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4721"},{"reference_url":"https://github.com/advisories/GHSA-83pm-7v48-5jp4","reference_id":"GHSA-83pm-7v48-5jp4","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-83pm-7v48-5jp4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/31062?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-5k13-n5su-sqce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4721","GHSA-83pm-7v48-5jp4","PYSEC-2022-43007"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ep38-eu98-fbas"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36279?format=json","vulnerability_id":"VCID-fcym-y8c1-xqdq","summary":"Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3457","reference_id":"","reference_type":"","scores":[{"value":"0.0022","scoring_system":"epss","scoring_elements":"0.44661","published_at":"2026-06-04T12:55:00Z"},{"value":"0.0022","scoring_system":"epss","scoring_elements":"0.44698","published_at":"2026-06-09T12:55:00Z"},{"value":"0.0022","scoring_system":"epss","scoring_elements":"0.44685","published_at":"2026-06-08T12:55:00Z"},{"value":"0.0022","scoring_system":"epss","scoring_elements":"0.44716","published_at":"2026-06-07T12:55:00Z"},{"value":"0.0022","scoring_system":"epss","scoring_elements":"0.44738","published_at":"2026-06-06T12:55:00Z"},{"value":"0.0022","scoring_system":"epss","scoring_elements":"0.4473","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3457"},{"reference_url":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/afc1bdfab5161c74012ff2590a6ec49cc0d8fde0","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-15T14:47:37Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/afc1bdfab5161c74012ff2590a6ec49cc0d8fde0"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43161.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43161.yaml"},{"reference_url":"https://huntr.dev/bounties/cfcab02e-d6ad-4dcf-b1b0-da90434bc55b","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-15T14:47:37Z/"}],"url":"https://huntr.dev/bounties/cfcab02e-d6ad-4dcf-b1b0-da90434bc55b"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3457","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3457"},{"reference_url":"https://github.com/advisories/GHSA-824x-jcxf-hpfg","reference_id":"GHSA-824x-jcxf-hpfg","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-824x-jcxf-hpfg"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/145117?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a5","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a5"},{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3457","GHSA-824x-jcxf-hpfg","PYSEC-2022-43161"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fcym-y8c1-xqdq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36250?format=json","vulnerability_id":"VCID-fdqn-8pt3-2bfz","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3371","reference_id":"","reference_type":"","scores":[{"value":"0.00468","scoring_system":"epss","scoring_elements":"0.64829","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00468","scoring_system":"epss","scoring_elements":"0.64877","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00468","scoring_system":"epss","scoring_elements":"0.6486","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00468","scoring_system":"epss","scoring_elements":"0.64871","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00468","scoring_system":"epss","scoring_elements":"0.64882","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00468","scoring_system":"epss","scoring_elements":"0.64872","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3371"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b62c479ff6979563c7c23e7182942bc4f460a2c7","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:02:31Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/b62c479ff6979563c7c23e7182942bc4f460a2c7"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-299.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-299.yaml"},{"reference_url":"https://huntr.dev/bounties/4e8f6136-50c7-4fa1-ac98-699bcb7b35ce","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:02:31Z/"}],"url":"https://huntr.dev/bounties/4e8f6136-50c7-4fa1-ac98-699bcb7b35ce"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3371","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3371"},{"reference_url":"https://github.com/advisories/GHSA-3fhq-72hw-jqwv","reference_id":"GHSA-3fhq-72hw-jqwv","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-3fhq-72hw-jqwv"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29295?format=json","purl":"pkg:pypi/rdiffweb@2.4.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10"},{"url":"http://public2.vulnerablecode.io/api/packages/144567?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a3"}],"aliases":["CVE-2022-3371","GHSA-3fhq-72hw-jqwv","PYSEC-2022-299"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fdqn-8pt3-2bfz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36249?format=json","vulnerability_id":"VCID-ffd3-kujb-f7fq","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3364","reference_id":"","reference_type":"","scores":[{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.5655","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56601","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56583","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56598","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56609","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56603","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3364"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b62c479ff6979563c7c23e7182942bc4f460a2c7","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:04:28Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/b62c479ff6979563c7c23e7182942bc4f460a2c7"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-298.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-298.yaml"},{"reference_url":"https://huntr.dev/bounties/e70ad507-1424-463b-bdf1-c4a6fbe6e720","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:04:28Z/"}],"url":"https://huntr.dev/bounties/e70ad507-1424-463b-bdf1-c4a6fbe6e720"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3364","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3364"},{"reference_url":"https://github.com/advisories/GHSA-fqfg-c577-2vc3","reference_id":"GHSA-fqfg-c577-2vc3","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-fqfg-c577-2vc3"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29295?format=json","purl":"pkg:pypi/rdiffweb@2.4.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10"},{"url":"http://public2.vulnerablecode.io/api/packages/144567?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a3"}],"aliases":["CVE-2022-3364","GHSA-fqfg-c577-2vc3","PYSEC-2022-298"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ffd3-kujb-f7fq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36204?format=json","vulnerability_id":"VCID-fxxn-nnzy-97bv","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3232","reference_id":"","reference_type":"","scores":[{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.2917","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.29172","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.29208","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.29241","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.29151","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00111","scoring_system":"epss","scoring_elements":"0.29139","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3232"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-281.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-281.yaml"},{"reference_url":"https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3232","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3232"},{"reference_url":"https://github.com/advisories/GHSA-cw2v-wv4g-w4p6","reference_id":"GHSA-cw2v-wv4g-w4p6","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-cw2v-wv4g-w4p6"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29288?format=json","purl":"pkg:pypi/rdiffweb@2.4.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-pva4-gkpj-juh8"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tjr6-1mzd-93ee"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-z43n-dk6v-pffh"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.5"}],"aliases":["CVE-2022-3232","GHSA-cw2v-wv4g-w4p6","PYSEC-2022-281"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fxxn-nnzy-97bv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36350?format=json","vulnerability_id":"VCID-h6v3-24fq-3udw","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4723","reference_id":"","reference_type":"","scores":[{"value":"0.00102","scoring_system":"epss","scoring_elements":"0.27458","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00102","scoring_system":"epss","scoring_elements":"0.27451","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00102","scoring_system":"epss","scoring_elements":"0.27501","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00102","scoring_system":"epss","scoring_elements":"0.27539","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00236","scoring_system":"epss","scoring_elements":"0.4668","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00236","scoring_system":"epss","scoring_elements":"0.46614","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4723"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/6e9ee210548f6d3210704cac302cfc7cdb239765","reference_id":"","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H"},{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:16:53Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/6e9ee210548f6d3210704cac302cfc7cdb239765"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43009.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43009.yaml"},{"reference_url":"https://huntr.dev/bounties/9369681b-8bfc-4146-a54c-c5108442d92c","reference_id":"","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H"},{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:16:53Z/"}],"url":"https://huntr.dev/bounties/9369681b-8bfc-4146-a54c-c5108442d92c"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4723","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4723"},{"reference_url":"https://github.com/advisories/GHSA-7q4r-x5qg-mmcp","reference_id":"GHSA-7q4r-x5qg-mmcp","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-7q4r-x5qg-mmcp"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/31062?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-5k13-n5su-sqce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4723","GHSA-7q4r-x5qg-mmcp","PYSEC-2022-43009"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-h6v3-24fq-3udw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36247?format=json","vulnerability_id":"VCID-jy4h-rrhr-83ah","summary":"Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3292","reference_id":"","reference_type":"","scores":[{"value":"0.00254","scoring_system":"epss","scoring_elements":"0.48924","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00254","scoring_system":"epss","scoring_elements":"0.48961","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00254","scoring_system":"epss","scoring_elements":"0.48947","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00254","scoring_system":"epss","scoring_elements":"0.48977","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00254","scoring_system":"epss","scoring_elements":"0.48995","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00254","scoring_system":"epss","scoring_elements":"0.48985","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3292"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/2406780831618405a13113377a784f3102465f40","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T14:22:00Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/2406780831618405a13113377a784f3102465f40"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-296.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-296.yaml"},{"reference_url":"https://huntr.dev/bounties/e9309018-e94f-4e15-b7d1-5d38b6021c5d","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T14:22:00Z/"}],"url":"https://huntr.dev/bounties/e9309018-e94f-4e15-b7d1-5d38b6021c5d"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3292","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3292"},{"reference_url":"https://github.com/advisories/GHSA-7fqm-jm52-f9vc","reference_id":"GHSA-7fqm-jm52-f9vc","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-7fqm-jm52-f9vc"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29293?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"},{"url":"http://public2.vulnerablecode.io/api/packages/29294?format=json","purl":"pkg:pypi/rdiffweb@2.4.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.9"}],"aliases":["CVE-2022-3292","GHSA-7fqm-jm52-f9vc","PYSEC-2022-296"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-jy4h-rrhr-83ah"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36191?format=json","vulnerability_id":"VCID-khum-ewzn-yfe6","summary":"Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3167","reference_id":"","reference_type":"","scores":[{"value":"0.00395","scoring_system":"epss","scoring_elements":"0.6066","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00395","scoring_system":"epss","scoring_elements":"0.60702","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00395","scoring_system":"epss","scoring_elements":"0.60687","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00395","scoring_system":"epss","scoring_elements":"0.60704","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00395","scoring_system":"epss","scoring_elements":"0.60716","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00395","scoring_system":"epss","scoring_elements":"0.60709","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3167"},{"reference_url":"https://github.com/advisories/GHSA-m379-x4xc-38x9","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-m379-x4xc-38x9"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/7294bb7466532762c93d711211e5958940c1b428","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/7294bb7466532762c93d711211e5958940c1b428"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-268.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-268.yaml"},{"reference_url":"https://huntr.dev/bounties/e5c2625b-34cc-4805-8223-80f2689e4e5c","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/e5c2625b-34cc-4805-8223-80f2689e4e5c"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3167","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3167"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29269?format=json","purl":"pkg:pypi/rdiffweb@2.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5922-k3p7-pfdj"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-91jt-tgps-27b2"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-e351-976k-sqak"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-fxxn-nnzy-97bv"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-n9ht-12n5-b7c9"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-pva4-gkpj-juh8"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tjr6-1mzd-93ee"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-z43n-dk6v-pffh"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.1"}],"aliases":["CVE-2022-3167","GHSA-m379-x4xc-38x9","PYSEC-2022-268"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-khum-ewzn-yfe6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36243?format=json","vulnerability_id":"VCID-mr71-9e9c-zbda","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3295","reference_id":"","reference_type":"","scores":[{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.5655","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56601","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56583","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56598","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56609","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00334","scoring_system":"epss","scoring_elements":"0.56603","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3295"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T20:28:35Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-293.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-293.yaml"},{"reference_url":"https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T20:28:35Z/"}],"url":"https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3295","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3295"},{"reference_url":"https://github.com/advisories/GHSA-hrj7-f62f-j7x7","reference_id":"GHSA-hrj7-f62f-j7x7","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-hrj7-f62f-j7x7"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29293?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3295","GHSA-hrj7-f62f-j7x7","PYSEC-2022-293"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mr71-9e9c-zbda"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36259?format=json","vulnerability_id":"VCID-n88y-9qre-n3bz","summary":"Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3438","reference_id":"","reference_type":"","scores":[{"value":"0.00314","scoring_system":"epss","scoring_elements":"0.54899","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00314","scoring_system":"epss","scoring_elements":"0.54898","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00314","scoring_system":"epss","scoring_elements":"0.5484","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00314","scoring_system":"epss","scoring_elements":"0.549","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00314","scoring_system":"epss","scoring_elements":"0.5488","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00314","scoring_system":"epss","scoring_elements":"0.54908","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3438"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/4d464b467f14b8eb9103d7f5f0774e49995527c7","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/4d464b467f14b8eb9103d7f5f0774e49995527c7"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43158.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43158.yaml"},{"reference_url":"https://huntr.dev/bounties/bc5689e4-221a-4200-a8ab-42c659f89f67","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/bc5689e4-221a-4200-a8ab-42c659f89f67"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3438","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3438"},{"reference_url":"https://github.com/advisories/GHSA-8g9m-vv69-7j99","reference_id":"GHSA-8g9m-vv69-7j99","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-8g9m-vv69-7j99"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/144524?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a4"},{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3438","GHSA-8g9m-vv69-7j99","PYSEC-2022-43158"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-n88y-9qre-n3bz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36194?format=json","vulnerability_id":"VCID-n9ht-12n5-b7c9","summary":"Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3174","reference_id":"","reference_type":"","scores":[{"value":"0.00183","scoring_system":"epss","scoring_elements":"0.39763","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00183","scoring_system":"epss","scoring_elements":"0.39816","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00183","scoring_system":"epss","scoring_elements":"0.39799","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00183","scoring_system":"epss","scoring_elements":"0.39826","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00183","scoring_system":"epss","scoring_elements":"0.39853","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00183","scoring_system":"epss","scoring_elements":"0.39849","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3174"},{"reference_url":"https://github.com/advisories/GHSA-mjw4-xvx6-3grg","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-mjw4-xvx6-3grg"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7e","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7e"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-271.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-271.yaml"},{"reference_url":"https://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3174","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3174"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29278?format=json","purl":"pkg:pypi/rdiffweb@2.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5922-k3p7-pfdj"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-fxxn-nnzy-97bv"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-pva4-gkpj-juh8"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tjr6-1mzd-93ee"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-z43n-dk6v-pffh"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2"}],"aliases":["CVE-2022-3174","GHSA-mjw4-xvx6-3grg","PYSEC-2022-271"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-n9ht-12n5-b7c9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36254?format=json","vulnerability_id":"VCID-nbqy-kang-vfau","summary":"Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3389","reference_id":"","reference_type":"","scores":[{"value":"0.00626","scoring_system":"epss","scoring_elements":"0.70578","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00626","scoring_system":"epss","scoring_elements":"0.70622","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00626","scoring_system":"epss","scoring_elements":"0.706","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00626","scoring_system":"epss","scoring_elements":"0.70612","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00626","scoring_system":"epss","scoring_elements":"0.70629","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00626","scoring_system":"epss","scoring_elements":"0.7062","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3389"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/323383d1db656f1b1291be529947bd943a6b0e99","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/323383d1db656f1b1291be529947bd943a6b0e99"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-302.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-302.yaml"},{"reference_url":"https://huntr.dev/bounties/f7d2a6ab-2faf-4719-bdb6-e4e5d6065752","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/f7d2a6ab-2faf-4719-bdb6-e4e5d6065752"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3389","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3389"},{"reference_url":"https://github.com/advisories/GHSA-hrrm-895h-xh34","reference_id":"GHSA-hrrm-895h-xh34","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-hrrm-895h-xh34"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29295?format=json","purl":"pkg:pypi/rdiffweb@2.4.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10"}],"aliases":["CVE-2022-3389","GHSA-hrrm-895h-xh34","PYSEC-2022-302"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-nbqy-kang-vfau"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36242?format=json","vulnerability_id":"VCID-nc4e-1muy-1kd7","summary":"Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3301","reference_id":"","reference_type":"","scores":[{"value":"0.00267","scoring_system":"epss","scoring_elements":"0.50385","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00267","scoring_system":"epss","scoring_elements":"0.50423","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00267","scoring_system":"epss","scoring_elements":"0.50405","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00267","scoring_system":"epss","scoring_elements":"0.50434","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00267","scoring_system":"epss","scoring_elements":"0.50453","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00267","scoring_system":"epss","scoring_elements":"0.50446","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3301"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"2.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T17:47:00Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-295.yaml","reference_id":"","reference_type":"","scores":[{"value":"2.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-295.yaml"},{"reference_url":"https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T17:47:00Z/"}],"url":"https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3301","reference_id":"","reference_type":"","scores":[{"value":"2.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3301"},{"reference_url":"https://github.com/advisories/GHSA-qq29-5vjh-vxwr","reference_id":"GHSA-qq29-5vjh-vxwr","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-qq29-5vjh-vxwr"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29293?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3301","GHSA-qq29-5vjh-vxwr","PYSEC-2022-295"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-nc4e-1muy-1kd7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36287?format=json","vulnerability_id":"VCID-ps4e-cg34-wyah","summary":"Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3363","reference_id":"","reference_type":"","scores":[{"value":"0.00492","scoring_system":"epss","scoring_elements":"0.65997","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00492","scoring_system":"epss","scoring_elements":"0.66052","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00492","scoring_system":"epss","scoring_elements":"0.66034","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00492","scoring_system":"epss","scoring_elements":"0.66046","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00492","scoring_system":"epss","scoring_elements":"0.66061","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00492","scoring_system":"epss","scoring_elements":"0.66049","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3363"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2","reference_id":"","reference_type":"","scores":[{"value":"2.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-07T18:29:00Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42978.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42978.yaml"},{"reference_url":"https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e","reference_id":"","reference_type":"","scores":[{"value":"2.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-07T18:29:00Z/"}],"url":"https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3363","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3363"},{"reference_url":"https://github.com/advisories/GHSA-jw36-mrvg-j5fx","reference_id":"GHSA-jw36-mrvg-j5fx","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-jw36-mrvg-j5fx"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29469?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a7"},{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3363","GHSA-jw36-mrvg-j5fx","PYSEC-2022-42978"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ps4e-cg34-wyah"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36236?format=json","vulnerability_id":"VCID-pva4-gkpj-juh8","summary":"Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3250","reference_id":"","reference_type":"","scores":[{"value":"0.00371","scoring_system":"epss","scoring_elements":"0.59196","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00371","scoring_system":"epss","scoring_elements":"0.59239","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00371","scoring_system":"epss","scoring_elements":"0.59223","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00371","scoring_system":"epss","scoring_elements":"0.59241","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00371","scoring_system":"epss","scoring_elements":"0.59248","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00371","scoring_system":"epss","scoring_elements":"0.59244","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3250"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/ac334dd27ceadac0661b1e2e059a8423433c3fee","reference_id":"","reference_type":"","scores":[{"value":"4.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"},{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-28T13:43:20Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/ac334dd27ceadac0661b1e2e059a8423433c3fee"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-287.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-287.yaml"},{"reference_url":"https://huntr.dev/bounties/39889a3f-8bb7-448a-b0d4-a18c671bbd23","reference_id":"","reference_type":"","scores":[{"value":"4.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"},{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-28T13:43:20Z/"}],"url":"https://huntr.dev/bounties/39889a3f-8bb7-448a-b0d4-a18c671bbd23"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3250","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3250"},{"reference_url":"https://github.com/advisories/GHSA-m748-hjqg-rpp8","reference_id":"GHSA-m748-hjqg-rpp8","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-m748-hjqg-rpp8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29290?format=json","purl":"pkg:pypi/rdiffweb@2.4.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6"}],"aliases":["CVE-2022-3250","GHSA-m748-hjqg-rpp8","PYSEC-2022-287"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pva4-gkpj-juh8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36346?format=json","vulnerability_id":"VCID-qcsd-5htt-h3ev","summary":"Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4722","reference_id":"","reference_type":"","scores":[{"value":"0.00164","scoring_system":"epss","scoring_elements":"0.37146","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00164","scoring_system":"epss","scoring_elements":"0.37055","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00243","scoring_system":"epss","scoring_elements":"0.4773","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00243","scoring_system":"epss","scoring_elements":"0.47718","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00243","scoring_system":"epss","scoring_elements":"0.47747","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00243","scoring_system":"epss","scoring_elements":"0.47765","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4722"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/d1aaa96b665a39fba9e98d6054a9de511ba0a837","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:46:39Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/d1aaa96b665a39fba9e98d6054a9de511ba0a837"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43008.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43008.yaml"},{"reference_url":"https://huntr.dev/bounties/c62126dc-d9a6-4d3e-988d-967031876c58","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:46:39Z/"}],"url":"https://huntr.dev/bounties/c62126dc-d9a6-4d3e-988d-967031876c58"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4722","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4722"},{"reference_url":"https://github.com/advisories/GHSA-wf33-6x33-wcf9","reference_id":"GHSA-wf33-6x33-wcf9","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-wf33-6x33-wcf9"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/31062?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-5k13-n5su-sqce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4722","GHSA-wf33-6x33-wcf9","PYSEC-2022-43008"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qcsd-5htt-h3ev"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36280?format=json","vulnerability_id":"VCID-rynh-v7q5-6kdg","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3439","reference_id":"","reference_type":"","scores":[{"value":"0.00509","scoring_system":"epss","scoring_elements":"0.66734","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00509","scoring_system":"epss","scoring_elements":"0.66698","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00509","scoring_system":"epss","scoring_elements":"0.66739","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00509","scoring_system":"epss","scoring_elements":"0.66747","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00509","scoring_system":"epss","scoring_elements":"0.66733","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00509","scoring_system":"epss","scoring_elements":"0.66717","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3439"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311","reference_id":"","reference_type":"","scores":[{"value":"4.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-14T15:36:25Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43159.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43159.yaml"},{"reference_url":"https://huntr.dev/bounties/37b86c45-b240-4626-bd53-b6f02d10e0d7","reference_id":"","reference_type":"","scores":[{"value":"4.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-14T15:36:25Z/"}],"url":"https://huntr.dev/bounties/37b86c45-b240-4626-bd53-b6f02d10e0d7"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3439","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3439"},{"reference_url":"https://github.com/advisories/GHSA-x8x2-wc2h-wc48","reference_id":"GHSA-x8x2-wc2h-wc48","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-x8x2-wc2h-wc48"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3439","GHSA-x8x2-wc2h-wc48","PYSEC-2022-43159"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rynh-v7q5-6kdg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36257?format=json","vulnerability_id":"VCID-sn4z-f439-6qe7","summary":"Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3376","reference_id":"","reference_type":"","scores":[{"value":"0.00489","scoring_system":"epss","scoring_elements":"0.65843","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00489","scoring_system":"epss","scoring_elements":"0.65901","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00489","scoring_system":"epss","scoring_elements":"0.65893","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00489","scoring_system":"epss","scoring_elements":"0.65907","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00489","scoring_system":"epss","scoring_elements":"0.65896","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00489","scoring_system":"epss","scoring_elements":"0.65882","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3376"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/2ffc2af65c8f8113b06e0b89929c604bcdf844b9","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/2ffc2af65c8f8113b06e0b89929c604bcdf844b9"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43157.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43157.yaml"},{"reference_url":"https://huntr.dev/bounties/a9021e93-6d18-4ac1-98ce-550c4697a4ed","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/a9021e93-6d18-4ac1-98ce-550c4697a4ed"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3376","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3376"},{"reference_url":"https://github.com/advisories/GHSA-7wr6-fj4x-893v","reference_id":"GHSA-7wr6-fj4x-893v","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-7wr6-fj4x-893v"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29462?format=json","purl":"pkg:pypi/rdiffweb@2.4.11a1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1"},{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3376","GHSA-7wr6-fj4x-893v","PYSEC-2022-43157"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-sn4z-f439-6qe7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36240?format=json","vulnerability_id":"VCID-t1sj-158f-efey","summary":"Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3269","reference_id":"","reference_type":"","scores":[{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.58201","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.58251","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.58233","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.58248","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.58258","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00357","scoring_system":"epss","scoring_elements":"0.5825","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3269"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/39e7dcd4a1f44d2a7bd92b79d78a800910b1b22b","reference_id":"","reference_type":"","scores":[{"value":"6.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-22T15:53:26Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/39e7dcd4a1f44d2a7bd92b79d78a800910b1b22b"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-290.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-290.yaml"},{"reference_url":"https://huntr.dev/bounties/67c25969-5e7a-4424-817e-e1a918f63cc6","reference_id":"","reference_type":"","scores":[{"value":"6.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-22T15:53:26Z/"}],"url":"https://huntr.dev/bounties/67c25969-5e7a-4424-817e-e1a918f63cc6"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3269","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3269"},{"reference_url":"https://github.com/advisories/GHSA-j3q4-gmj4-mj95","reference_id":"GHSA-j3q4-gmj4-mj95","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-j3q4-gmj4-mj95"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29291?format=json","purl":"pkg:pypi/rdiffweb@2.4.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.7"}],"aliases":["CVE-2022-3269","GHSA-j3q4-gmj4-mj95","PYSEC-2022-290"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-t1sj-158f-efey"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36237?format=json","vulnerability_id":"VCID-tjr6-1mzd-93ee","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3233","reference_id":"","reference_type":"","scores":[{"value":"0.0013","scoring_system":"epss","scoring_elements":"0.32055","published_at":"2026-06-04T12:55:00Z"},{"value":"0.0013","scoring_system":"epss","scoring_elements":"0.32058","published_at":"2026-06-07T12:55:00Z"},{"value":"0.0013","scoring_system":"epss","scoring_elements":"0.32095","published_at":"2026-06-06T12:55:00Z"},{"value":"0.0013","scoring_system":"epss","scoring_elements":"0.32127","published_at":"2026-06-05T12:55:00Z"},{"value":"0.0013","scoring_system":"epss","scoring_elements":"0.32049","published_at":"2026-06-09T12:55:00Z"},{"value":"0.0013","scoring_system":"epss","scoring_elements":"0.32026","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3233"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/18a5aabd48fa6d2d2771a25f95610c28a1a097ca","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-23T20:32:28Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/18a5aabd48fa6d2d2771a25f95610c28a1a097ca"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-285.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-285.yaml"},{"reference_url":"https://huntr.dev/bounties/5ec206e0-eca0-4957-9af4-fdd9185d1db3","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-23T20:32:28Z/"}],"url":"https://huntr.dev/bounties/5ec206e0-eca0-4957-9af4-fdd9185d1db3"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3233","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3233"},{"reference_url":"https://github.com/advisories/GHSA-9vxf-mcm6-5m42","reference_id":"GHSA-9vxf-mcm6-5m42","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-9vxf-mcm6-5m42"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29290?format=json","purl":"pkg:pypi/rdiffweb@2.4.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6"}],"aliases":["CVE-2022-3233","GHSA-9vxf-mcm6-5m42","PYSEC-2022-285"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tjr6-1mzd-93ee"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36339?format=json","vulnerability_id":"VCID-tv4c-g8r6-xbf6","summary":"Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4644","reference_id":"","reference_type":"","scores":[{"value":"0.00185","scoring_system":"epss","scoring_elements":"0.40022","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00185","scoring_system":"epss","scoring_elements":"0.39997","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00185","scoring_system":"epss","scoring_elements":"0.40025","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00185","scoring_system":"epss","scoring_elements":"0.3994","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00185","scoring_system":"epss","scoring_elements":"0.39988","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00185","scoring_system":"epss","scoring_elements":"0.3997","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4644"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/5f861670ef8f38ca8eea52a98672d0e0fabb5368","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L"},{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T18:32:13Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/5f861670ef8f38ca8eea52a98672d0e0fabb5368"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43003.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43003.yaml"},{"reference_url":"https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L"},{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T18:32:13Z/"}],"url":"https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4644","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4644"},{"reference_url":"https://github.com/advisories/GHSA-639f-hxcv-84mc","reference_id":"GHSA-639f-hxcv-84mc","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-639f-hxcv-84mc"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/30418?format=json","purl":"pkg:pypi/rdiffweb@2.5.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.4"}],"aliases":["CVE-2022-4644","GHSA-639f-hxcv-84mc","PYSEC-2022-43003"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tv4c-g8r6-xbf6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36245?format=json","vulnerability_id":"VCID-vmrb-sm2h-hqf1","summary":"Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3290","reference_id":"","reference_type":"","scores":[{"value":"0.00299","scoring_system":"epss","scoring_elements":"0.53557","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00299","scoring_system":"epss","scoring_elements":"0.53611","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00299","scoring_system":"epss","scoring_elements":"0.53588","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00299","scoring_system":"epss","scoring_elements":"0.53612","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00299","scoring_system":"epss","scoring_elements":"0.53625","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00299","scoring_system":"epss","scoring_elements":"0.53616","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3290"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T20:06:59Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-292.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-292.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43184.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43184.yaml"},{"reference_url":"https://huntr.dev/bounties/d8b8519d-96a5-484c-8141-624c54290bf5","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T20:06:59Z/"}],"url":"https://huntr.dev/bounties/d8b8519d-96a5-484c-8141-624c54290bf5"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3290","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3290"},{"reference_url":"https://github.com/advisories/GHSA-5v95-j4rr-6f3c","reference_id":"GHSA-5v95-j4rr-6f3c","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-5v95-j4rr-6f3c"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29293?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3290","GHSA-5v95-j4rr-6f3c","PYSEC-2022-292","PYSEC-2022-43184"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vmrb-sm2h-hqf1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36348?format=json","vulnerability_id":"VCID-wyn5-w4qh-nfht","summary":"Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4719","reference_id":"","reference_type":"","scores":[{"value":"0.00422","scoring_system":"epss","scoring_elements":"0.6244","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00422","scoring_system":"epss","scoring_elements":"0.62438","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00422","scoring_system":"epss","scoring_elements":"0.62424","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00422","scoring_system":"epss","scoring_elements":"0.62439","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00422","scoring_system":"epss","scoring_elements":"0.62394","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00422","scoring_system":"epss","scoring_elements":"0.62449","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-4719"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:49:14Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43005.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43005.yaml"},{"reference_url":"https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:49:14Z/"}],"url":"https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4719","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4719"},{"reference_url":"https://github.com/advisories/GHSA-2wpw-cm9w-v4xm","reference_id":"GHSA-2wpw-cm9w-v4xm","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-2wpw-cm9w-v4xm"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/31062?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-5k13-n5su-sqce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4719","GHSA-2wpw-cm9w-v4xm","PYSEC-2022-43005"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wyn5-w4qh-nfht"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36278?format=json","vulnerability_id":"VCID-yssm-eyx3-efhs","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3456","reference_id":"","reference_type":"","scores":[{"value":"0.00316","scoring_system":"epss","scoring_elements":"0.54954","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00316","scoring_system":"epss","scoring_elements":"0.55014","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00316","scoring_system":"epss","scoring_elements":"0.54993","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00316","scoring_system":"epss","scoring_elements":"0.55021","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00316","scoring_system":"epss","scoring_elements":"0.55012","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3456"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311","reference_id":"","reference_type":"","scores":[{"value":"5.6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-15T14:49:44Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43160.yaml","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43160.yaml"},{"reference_url":"https://huntr.dev/bounties/b34412ca-50c5-4615-b7e3-5d07d33acfce","reference_id":"","reference_type":"","scores":[{"value":"5.6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-15T14:49:44Z/"}],"url":"https://huntr.dev/bounties/b34412ca-50c5-4615-b7e3-5d07d33acfce"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3456","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3456"},{"reference_url":"https://github.com/advisories/GHSA-92gf-p376-6r9r","reference_id":"GHSA-92gf-p376-6r9r","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-92gf-p376-6r9r"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3456","GHSA-92gf-p376-6r9r","PYSEC-2022-43160"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yssm-eyx3-efhs"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36283?format=json","vulnerability_id":"VCID-yz9x-nz9u-wybe","summary":"Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3327","reference_id":"","reference_type":"","scores":[{"value":"0.0033","scoring_system":"epss","scoring_elements":"0.56269","published_at":"2026-06-07T12:55:00Z"},{"value":"0.0033","scoring_system":"epss","scoring_elements":"0.56272","published_at":"2026-06-09T12:55:00Z"},{"value":"0.0033","scoring_system":"epss","scoring_elements":"0.56253","published_at":"2026-06-08T12:55:00Z"},{"value":"0.0033","scoring_system":"epss","scoring_elements":"0.5622","published_at":"2026-06-04T12:55:00Z"},{"value":"0.0033","scoring_system":"epss","scoring_elements":"0.56276","published_at":"2026-06-05T12:55:00Z"},{"value":"0.0033","scoring_system":"epss","scoring_elements":"0.56282","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3327"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095","reference_id":"","reference_type":"","scores":[{"value":"4.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-09T14:18:37Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42977.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42977.yaml"},{"reference_url":"https://gitlab.com/ikus-soft/rdiffweb#next-release-250","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://gitlab.com/ikus-soft/rdiffweb#next-release-250"},{"reference_url":"https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1","reference_id":"","reference_type":"","scores":[{"value":"4.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-09T14:18:37Z/"}],"url":"https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3327","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3327"},{"reference_url":"https://github.com/advisories/GHSA-99j5-fvg3-54pm","reference_id":"GHSA-99j5-fvg3-54pm","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-99j5-fvg3-54pm"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29295?format=json","purl":"pkg:pypi/rdiffweb@2.4.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10"},{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3327","GHSA-99j5-fvg3-54pm","PYSEC-2022-42977"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yz9x-nz9u-wybe"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36238?format=json","vulnerability_id":"VCID-z43n-dk6v-pffh","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3267","reference_id":"","reference_type":"","scores":[{"value":"0.00169","scoring_system":"epss","scoring_elements":"0.37825","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00169","scoring_system":"epss","scoring_elements":"0.37865","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00169","scoring_system":"epss","scoring_elements":"0.37853","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00169","scoring_system":"epss","scoring_elements":"0.37888","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00169","scoring_system":"epss","scoring_elements":"0.37919","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00169","scoring_system":"epss","scoring_elements":"0.37916","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3267"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314","reference_id":"","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-23T20:21:36Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-284.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-284.yaml"},{"reference_url":"https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2","reference_id":"","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-23T20:21:36Z/"}],"url":"https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3267","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3267"},{"reference_url":"https://github.com/advisories/GHSA-74j6-3hh4-w3f5","reference_id":"GHSA-74j6-3hh4-w3f5","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-74j6-3hh4-w3f5"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29290?format=json","purl":"pkg:pypi/rdiffweb@2.4.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1fg8-rcx8-77fq"},{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-29xz-5wxu-ybed"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-btgq-2yaz-abdd"},{"vulnerability":"VCID-dpbu-gy6u-abd3"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-fdqn-8pt3-2bfz"},{"vulnerability":"VCID-ffd3-kujb-f7fq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-jy4h-rrhr-83ah"},{"vulnerability":"VCID-mr71-9e9c-zbda"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-nbqy-kang-vfau"},{"vulnerability":"VCID-nc4e-1muy-1kd7"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-sn4z-f439-6qe7"},{"vulnerability":"VCID-t1sj-158f-efey"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-vmrb-sm2h-hqf1"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"},{"vulnerability":"VCID-yz9x-nz9u-wybe"},{"vulnerability":"VCID-zzjz-9wv2-vfcc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6"}],"aliases":["CVE-2022-3267","GHSA-74j6-3hh4-w3f5","PYSEC-2022-284"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-z43n-dk6v-pffh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36256?format=json","vulnerability_id":"VCID-zzjz-9wv2-vfcc","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3273","reference_id":"","reference_type":"","scores":[{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.4186","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.41805","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.41775","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.41797","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.41831","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.41851","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3273"},{"reference_url":"https://github.com/ikus060/rdiffweb","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43156.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43156.yaml"},{"reference_url":"https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3273","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3273"},{"reference_url":"https://github.com/advisories/GHSA-9g3v-v24q-jj5p","reference_id":"GHSA-9g3v-v24q-jj5p","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-9g3v-v24q-jj5p"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/29462?format=json","purl":"pkg:pypi/rdiffweb@2.4.11a1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-5xg7-u3nr-nkfg"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-9f5c-ne9b-27fd"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-fcym-y8c1-xqdq"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-n88y-9qre-n3bz"},{"vulnerability":"VCID-ps4e-cg34-wyah"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-rynh-v7q5-6kdg"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"},{"vulnerability":"VCID-yssm-eyx3-efhs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1"},{"url":"http://public2.vulnerablecode.io/api/packages/29472?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-25yw-5nru-aygm"},{"vulnerability":"VCID-287j-23ju-9fhk"},{"vulnerability":"VCID-2n1n-8nzg-xuh3"},{"vulnerability":"VCID-52wf-fheq-cuer"},{"vulnerability":"VCID-57wc-s2nn-cyeu"},{"vulnerability":"VCID-5k13-n5su-sqce"},{"vulnerability":"VCID-6zc1-xs64-1bc6"},{"vulnerability":"VCID-ep38-eu98-fbas"},{"vulnerability":"VCID-h6v3-24fq-3udw"},{"vulnerability":"VCID-qcsd-5htt-h3ev"},{"vulnerability":"VCID-tv4c-g8r6-xbf6"},{"vulnerability":"VCID-wyn5-w4qh-nfht"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3273","GHSA-9g3v-v24q-jj5p","PYSEC-2022-43156"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zzjz-9wv2-vfcc"}],"fixing_vulnerabilities":[],"risk_score":"4.5","resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@1.0.1"}