Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/zsh@5.4.2-r1?arch=ppc64le&distroversion=v3.23&reponame=main
Typeapk
Namespacealpine
Namezsh
Version5.4.2-r1
Qualifiers
arch ppc64le
distroversion v3.23
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version5.8-r0
Latest_non_vulnerable_version5.8.1-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-h2au-1dgd-ubcm
vulnerability_id VCID-h2au-1dgd-ubcm
summary Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1083.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1083.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1083
reference_id
reference_type
scores
0
value 0.00074
scoring_system epss
scoring_elements 0.22346
published_at 2026-06-04T12:55:00Z
1
value 0.00074
scoring_system epss
scoring_elements 0.2243
published_at 2026-06-05T12:55:00Z
2
value 0.00074
scoring_system epss
scoring_elements 0.22314
published_at 2026-06-08T12:55:00Z
3
value 0.00074
scoring_system epss
scoring_elements 0.22417
published_at 2026-06-06T12:55:00Z
4
value 0.00074
scoring_system epss
scoring_elements 0.22367
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1083
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1083
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1083
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1557382
reference_id 1557382
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1557382
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894043
reference_id 894043
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894043
6
reference_url https://security.gentoo.org/glsa/201805-10
reference_id GLSA-201805-10
reference_type
scores
url https://security.gentoo.org/glsa/201805-10
7
reference_url https://access.redhat.com/errata/RHSA-2018:1932
reference_id RHSA-2018:1932
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:1932
8
reference_url https://access.redhat.com/errata/RHSA-2018:3073
reference_id RHSA-2018:3073
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3073
9
reference_url https://usn.ubuntu.com/3608-1/
reference_id USN-3608-1
reference_type
scores
url https://usn.ubuntu.com/3608-1/
fixed_packages
0
url pkg:apk/alpine/zsh@5.4.2-r1?arch=ppc64le&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/zsh@5.4.2-r1?arch=ppc64le&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/zsh@5.4.2-r1%3Farch=ppc64le&distroversion=v3.23&reponame=main
aliases CVE-2018-1083
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h2au-1dgd-ubcm
1
url VCID-n1jy-7b9v-6ue7
vulnerability_id VCID-n1jy-7b9v-6ue7
summary zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local attacker could exploit this to cause a denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1071.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1071.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1071
reference_id
reference_type
scores
0
value 0.00044
scoring_system epss
scoring_elements 0.13711
published_at 2026-06-04T12:55:00Z
1
value 0.00044
scoring_system epss
scoring_elements 0.1367
published_at 2026-06-08T12:55:00Z
2
value 0.00044
scoring_system epss
scoring_elements 0.13794
published_at 2026-06-06T12:55:00Z
3
value 0.00044
scoring_system epss
scoring_elements 0.13756
published_at 2026-06-07T12:55:00Z
4
value 0.00044
scoring_system epss
scoring_elements 0.13791
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1071
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1071
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1071
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1553531
reference_id 1553531
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1553531
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894044
reference_id 894044
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894044
6
reference_url https://security.archlinux.org/AVG-652
reference_id AVG-652
reference_type
scores
0
value Low
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-652
7
reference_url https://security.gentoo.org/glsa/201805-10
reference_id GLSA-201805-10
reference_type
scores
url https://security.gentoo.org/glsa/201805-10
8
reference_url https://access.redhat.com/errata/RHSA-2018:3073
reference_id RHSA-2018:3073
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3073
9
reference_url https://usn.ubuntu.com/3608-1/
reference_id USN-3608-1
reference_type
scores
url https://usn.ubuntu.com/3608-1/
fixed_packages
0
url pkg:apk/alpine/zsh@5.4.2-r1?arch=ppc64le&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/zsh@5.4.2-r1?arch=ppc64le&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/zsh@5.4.2-r1%3Farch=ppc64le&distroversion=v3.23&reponame=main
aliases CVE-2018-1071
risk_score 1.5
exploitability 0.5
weighted_severity 3.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n1jy-7b9v-6ue7
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/zsh@5.4.2-r1%3Farch=ppc64le&distroversion=v3.23&reponame=main