Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/shopware/production@6.3.3.1
Typecomposer
Namespaceshopware
Nameproduction
Version6.3.3.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version6.3.5.3
Latest_non_vulnerable_version6.3.5.3
Affected_by_vulnerabilities
0
url VCID-j2bm-eex6-2ycw
vulnerability_id VCID-j2bm-eex6-2ycw
summary 
Exposure of .env if project root is configured as web root in shopware/production
The .env and other sensitive files can be leaked if the project root and not `/public` is configured as the web root.
references
0
reference_url https://github.com/advisories/GHSA-3pcr-4982-548m
reference_id GHSA-3pcr-4982-548m
reference_type
scores
url https://github.com/advisories/GHSA-3pcr-4982-548m
1
reference_url https://github.com/shopware/platform/security/advisories/GHSA-3pcr-4982-548m
reference_id GHSA-3pcr-4982-548m
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/shopware/platform/security/advisories/GHSA-3pcr-4982-548m
fixed_packages
0
url pkg:composer/shopware/production@6.3.5%2B3
purl pkg:composer/shopware/production@6.3.5%2B3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/shopware/production@6.3.5%252B3
1
url pkg:composer/shopware/production@6.3.5.3
purl pkg:composer/shopware/production@6.3.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/shopware/production@6.3.5.3
aliases GHSA-3pcr-4982-548m, GMS-2021-56
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j2bm-eex6-2ycw
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/shopware/production@6.3.3.1