Lookup for vulnerable packages by Package URL.

Purlpkg:composer/silverstripe/framework@3.5.5-rc1
Typecomposer
Namespacesilverstripe
Nameframework
Version3.5.5-rc1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version5.3.23
Latest_non_vulnerable_version6.0.0-alpha1
Affected_by_vulnerabilities
0
url VCID-me4v-9ws9-2ybz
vulnerability_id VCID-me4v-9ws9-2ybz
summary silverstripe/framework sends passwords back to browsers under some circumstances
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2018-013-1.yaml
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2018-013-1.yaml
1
reference_url https://github.com/silverstripe/silverstripe-framework
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/silverstripe/silverstripe-framework
2
reference_url https://github.com/silverstripe/silverstripe-framework/commit/c28f411abd4837cdd9dbf87c4457976e678131cb
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/silverstripe/silverstripe-framework/commit/c28f411abd4837cdd9dbf87c4457976e678131cb
3
reference_url https://github.com/silverstripe/silverstripe-framework/commit/f688bcb1a370e41df1b573a24fa3994b3895bacf
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/silverstripe/silverstripe-framework/commit/f688bcb1a370e41df1b573a24fa3994b3895bacf
4
reference_url https://www.silverstripe.org/download/security-releases/ss-2018-013
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://www.silverstripe.org/download/security-releases/ss-2018-013
5
reference_url https://github.com/advisories/GHSA-vh7q-j8p5-2h4h
reference_id GHSA-vh7q-j8p5-2h4h
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vh7q-j8p5-2h4h
fixed_packages
0
url pkg:composer/silverstripe/framework@3.7.0
purl pkg:composer/silverstripe/framework@3.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1e21-x465-abgz
1
vulnerability VCID-3ftm-1ytk-77ee
2
vulnerability VCID-436b-s848-ske3
3
vulnerability VCID-445u-qqe9-gbch
4
vulnerability VCID-55up-67gu-n7hk
5
vulnerability VCID-6u99-zfaw-h7ha
6
vulnerability VCID-7us5-kn2v-pbc6
7
vulnerability VCID-8j7g-u2z1-1ycb
8
vulnerability VCID-9man-5bj8-e7fm
9
vulnerability VCID-cma7-m5y5-juhw
10
vulnerability VCID-f2eh-56eb-pydf
11
vulnerability VCID-g6a1-jazp-mufn
12
vulnerability VCID-gr26-gwtr-eqa1
13
vulnerability VCID-hmxb-equc-1bau
14
vulnerability VCID-jbrw-8yw5-u7ay
15
vulnerability VCID-kjha-tu3x-pkae
16
vulnerability VCID-mwy1-dxrm-5qes
17
vulnerability VCID-q5tn-heja-1uen
18
vulnerability VCID-qw2u-5zmm-ckac
19
vulnerability VCID-rh6g-dz5w-h7a4
20
vulnerability VCID-su5y-y12y-y3b9
21
vulnerability VCID-tbhq-fnaq-gubs
22
vulnerability VCID-uk5a-ha6p-vkbq
23
vulnerability VCID-uyuz-1bws-rkht
24
vulnerability VCID-vkxb-qh8t-63f2
25
vulnerability VCID-vnbm-fq6d-3uax
26
vulnerability VCID-vx3f-ny91-1fff
27
vulnerability VCID-wntr-v8fx-3ycx
28
vulnerability VCID-wxzb-brfu-pugq
29
vulnerability VCID-zsfa-jtt7-7fhr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.7.0
1
url pkg:composer/silverstripe/framework@4.0.4
purl pkg:composer/silverstripe/framework@4.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-436b-s848-ske3
1
vulnerability VCID-445u-qqe9-gbch
2
vulnerability VCID-533n-8rjm-k7ct
3
vulnerability VCID-55up-67gu-n7hk
4
vulnerability VCID-6eqf-7qyv-zuas
5
vulnerability VCID-6u99-zfaw-h7ha
6
vulnerability VCID-7rsm-671q-n3cx
7
vulnerability VCID-7us5-kn2v-pbc6
8
vulnerability VCID-8j7g-u2z1-1ycb
9
vulnerability VCID-91ry-vq9d-pbgb
10
vulnerability VCID-9man-5bj8-e7fm
11
vulnerability VCID-9szg-7pyu-kqdx
12
vulnerability VCID-cma7-m5y5-juhw
13
vulnerability VCID-f2eh-56eb-pydf
14
vulnerability VCID-frp8-zzqn-27ej
15
vulnerability VCID-g6a1-jazp-mufn
16
vulnerability VCID-gjrp-er99-rbed
17
vulnerability VCID-gr26-gwtr-eqa1
18
vulnerability VCID-hmxb-equc-1bau
19
vulnerability VCID-jbrw-8yw5-u7ay
20
vulnerability VCID-kjha-tu3x-pkae
21
vulnerability VCID-mwy1-dxrm-5qes
22
vulnerability VCID-q5tn-heja-1uen
23
vulnerability VCID-qw2u-5zmm-ckac
24
vulnerability VCID-rh6g-dz5w-h7a4
25
vulnerability VCID-su5y-y12y-y3b9
26
vulnerability VCID-tbhq-fnaq-gubs
27
vulnerability VCID-ug8p-6ny6-fkas
28
vulnerability VCID-uk5a-ha6p-vkbq
29
vulnerability VCID-uyuz-1bws-rkht
30
vulnerability VCID-vkxb-qh8t-63f2
31
vulnerability VCID-vx3f-ny91-1fff
32
vulnerability VCID-wntr-v8fx-3ycx
33
vulnerability VCID-wxzb-brfu-pugq
34
vulnerability VCID-x5m3-hm2b-b3bc
35
vulnerability VCID-zsfa-jtt7-7fhr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.4
2
url pkg:composer/silverstripe/framework@4.1.1
purl pkg:composer/silverstripe/framework@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-436b-s848-ske3
1
vulnerability VCID-445u-qqe9-gbch
2
vulnerability VCID-4rj3-yt7y-rfcs
3
vulnerability VCID-533n-8rjm-k7ct
4
vulnerability VCID-55up-67gu-n7hk
5
vulnerability VCID-6eqf-7qyv-zuas
6
vulnerability VCID-6u99-zfaw-h7ha
7
vulnerability VCID-7rsm-671q-n3cx
8
vulnerability VCID-7us5-kn2v-pbc6
9
vulnerability VCID-8j7g-u2z1-1ycb
10
vulnerability VCID-91ry-vq9d-pbgb
11
vulnerability VCID-9man-5bj8-e7fm
12
vulnerability VCID-9szg-7pyu-kqdx
13
vulnerability VCID-cma7-m5y5-juhw
14
vulnerability VCID-f2eh-56eb-pydf
15
vulnerability VCID-frp8-zzqn-27ej
16
vulnerability VCID-g6a1-jazp-mufn
17
vulnerability VCID-gjrp-er99-rbed
18
vulnerability VCID-gr26-gwtr-eqa1
19
vulnerability VCID-hmxb-equc-1bau
20
vulnerability VCID-jbrw-8yw5-u7ay
21
vulnerability VCID-kjha-tu3x-pkae
22
vulnerability VCID-mwy1-dxrm-5qes
23
vulnerability VCID-q5tn-heja-1uen
24
vulnerability VCID-qw2u-5zmm-ckac
25
vulnerability VCID-rh6g-dz5w-h7a4
26
vulnerability VCID-su5y-y12y-y3b9
27
vulnerability VCID-tbhq-fnaq-gubs
28
vulnerability VCID-ug8p-6ny6-fkas
29
vulnerability VCID-uk5a-ha6p-vkbq
30
vulnerability VCID-uyuz-1bws-rkht
31
vulnerability VCID-vkxb-qh8t-63f2
32
vulnerability VCID-vx3f-ny91-1fff
33
vulnerability VCID-wntr-v8fx-3ycx
34
vulnerability VCID-wxzb-brfu-pugq
35
vulnerability VCID-x5m3-hm2b-b3bc
36
vulnerability VCID-zsfa-jtt7-7fhr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.1.1
aliases GHSA-vh7q-j8p5-2h4h
risk_score 1.6
exploitability 0.5
weighted_severity 3.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-me4v-9ws9-2ybz
Fixing_vulnerabilities
Risk_score1.6
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.5.5-rc1