Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/apache2@2.4.66-r0?arch=ppc64le&distroversion=v3.23&reponame=main
Typeapk
Namespacealpine
Nameapache2
Version2.4.66-r0
Qualifiers
arch ppc64le
distroversion v3.23
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version2.4.67-r0
Latest_non_vulnerable_version2.4.67-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-2d8p-bbc1-hkfa
vulnerability_id VCID-2d8p-bbc1-hkfa
summary 
Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives.

This issue affects Apache HTTP Server before 2.4.66.

Users are recommended to upgrade to version 2.4.66, which fixes the issue.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-58098.json
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-58098.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-58098
reference_id
reference_type
scores
0
value 0.00017
scoring_system epss
scoring_elements 0.04218
published_at 2026-05-14T12:55:00Z
1
value 0.00017
scoring_system epss
scoring_elements 0.04129
published_at 2026-05-05T12:55:00Z
2
value 0.00017
scoring_system epss
scoring_elements 0.04157
published_at 2026-05-07T12:55:00Z
3
value 0.00017
scoring_system epss
scoring_elements 0.04195
published_at 2026-05-09T12:55:00Z
4
value 0.00017
scoring_system epss
scoring_elements 0.04197
published_at 2026-05-11T12:55:00Z
5
value 0.00017
scoring_system epss
scoring_elements 0.04201
published_at 2026-05-12T12:55:00Z
6
value 0.00027
scoring_system epss
scoring_elements 0.07443
published_at 2026-04-04T12:55:00Z
7
value 0.00027
scoring_system epss
scoring_elements 0.07398
published_at 2026-04-02T12:55:00Z
8
value 0.00031
scoring_system epss
scoring_elements 0.08772
published_at 2026-04-11T12:55:00Z
9
value 0.00031
scoring_system epss
scoring_elements 0.0875
published_at 2026-04-12T12:55:00Z
10
value 0.00031
scoring_system epss
scoring_elements 0.08736
published_at 2026-04-13T12:55:00Z
11
value 0.00031
scoring_system epss
scoring_elements 0.08624
published_at 2026-04-16T12:55:00Z
12
value 0.00031
scoring_system epss
scoring_elements 0.08612
published_at 2026-04-18T12:55:00Z
13
value 0.00031
scoring_system epss
scoring_elements 0.08766
published_at 2026-04-21T12:55:00Z
14
value 0.00031
scoring_system epss
scoring_elements 0.08777
published_at 2026-04-24T12:55:00Z
15
value 0.00031
scoring_system epss
scoring_elements 0.08731
published_at 2026-04-26T12:55:00Z
16
value 0.00031
scoring_system epss
scoring_elements 0.08735
published_at 2026-04-29T12:55:00Z
17
value 0.00031
scoring_system epss
scoring_elements 0.08669
published_at 2026-04-07T12:55:00Z
18
value 0.00031
scoring_system epss
scoring_elements 0.08771
published_at 2026-04-09T12:55:00Z
19
value 0.00031
scoring_system epss
scoring_elements 0.08745
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-58098
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58098
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58098
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121926
reference_id 1121926
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121926
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2419365
reference_id 2419365
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2419365
6
reference_url https://httpd.apache.org/security/json/CVE-2025-58098.json
reference_id CVE-2025-58098
reference_type
scores
url https://httpd.apache.org/security/json/CVE-2025-58098.json
7
reference_url https://access.redhat.com/errata/RHSA-2025:23732
reference_id RHSA-2025:23732
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23732
8
reference_url https://access.redhat.com/errata/RHSA-2025:23919
reference_id RHSA-2025:23919
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23919
9
reference_url https://access.redhat.com/errata/RHSA-2025:23932
reference_id RHSA-2025:23932
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23932
10
reference_url https://access.redhat.com/errata/RHSA-2026:0009
reference_id RHSA-2026:0009
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0009
11
reference_url https://access.redhat.com/errata/RHSA-2026:0010
reference_id RHSA-2026:0010
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0010
12
reference_url https://access.redhat.com/errata/RHSA-2026:0011
reference_id RHSA-2026:0011
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0011
13
reference_url https://access.redhat.com/errata/RHSA-2026:0012
reference_id RHSA-2026:0012
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0012
14
reference_url https://access.redhat.com/errata/RHSA-2026:0074
reference_id RHSA-2026:0074
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0074
15
reference_url https://access.redhat.com/errata/RHSA-2026:0075
reference_id RHSA-2026:0075
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0075
16
reference_url https://access.redhat.com/errata/RHSA-2026:0090
reference_id RHSA-2026:0090
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0090
17
reference_url https://access.redhat.com/errata/RHSA-2026:0095
reference_id RHSA-2026:0095
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0095
18
reference_url https://access.redhat.com/errata/RHSA-2026:0139
reference_id RHSA-2026:0139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0139
19
reference_url https://access.redhat.com/errata/RHSA-2026:0141
reference_id RHSA-2026:0141
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0141
20
reference_url https://access.redhat.com/errata/RHSA-2026:0171
reference_id RHSA-2026:0171
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0171
21
reference_url https://access.redhat.com/errata/RHSA-2026:2994
reference_id RHSA-2026:2994
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:2994
22
reference_url https://access.redhat.com/errata/RHSA-2026:2995
reference_id RHSA-2026:2995
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:2995
23
reference_url https://access.redhat.com/errata/RHSA-2026:5156
reference_id RHSA-2026:5156
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5156
24
reference_url https://usn.ubuntu.com/7968-1/
reference_id USN-7968-1
reference_type
scores
url https://usn.ubuntu.com/7968-1/
fixed_packages
0
url pkg:apk/alpine/apache2@2.4.66-r0?arch=ppc64le&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/apache2@2.4.66-r0?arch=ppc64le&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/apache2@2.4.66-r0%3Farch=ppc64le&distroversion=v3.23&reponame=main
aliases CVE-2025-58098
risk_score 3.2
exploitability 0.5
weighted_severity 6.4
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2d8p-bbc1-hkfa
1
url VCID-fsh3-7b9j-dfgf
vulnerability_id VCID-fsh3-7b9j-dfgf
summary 
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs.

This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.

Users are recommended to upgrade to version 2.4.66 which fixes the issue.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-65082.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-65082.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-65082
reference_id
reference_type
scores
0
value 0.00138
scoring_system epss
scoring_elements 0.33403
published_at 2026-05-14T12:55:00Z
1
value 0.00138
scoring_system epss
scoring_elements 0.33278
published_at 2026-05-05T12:55:00Z
2
value 0.00138
scoring_system epss
scoring_elements 0.33345
published_at 2026-05-07T12:55:00Z
3
value 0.00138
scoring_system epss
scoring_elements 0.33386
published_at 2026-05-09T12:55:00Z
4
value 0.00138
scoring_system epss
scoring_elements 0.33299
published_at 2026-05-11T12:55:00Z
5
value 0.00138
scoring_system epss
scoring_elements 0.33324
published_at 2026-05-12T12:55:00Z
6
value 0.00156
scoring_system epss
scoring_elements 0.36463
published_at 2026-04-04T12:55:00Z
7
value 0.00156
scoring_system epss
scoring_elements 0.3643
published_at 2026-04-02T12:55:00Z
8
value 0.00164
scoring_system epss
scoring_elements 0.37477
published_at 2026-04-11T12:55:00Z
9
value 0.00164
scoring_system epss
scoring_elements 0.37443
published_at 2026-04-12T12:55:00Z
10
value 0.00164
scoring_system epss
scoring_elements 0.37416
published_at 2026-04-13T12:55:00Z
11
value 0.00164
scoring_system epss
scoring_elements 0.37445
published_at 2026-04-18T12:55:00Z
12
value 0.00164
scoring_system epss
scoring_elements 0.3739
published_at 2026-04-21T12:55:00Z
13
value 0.00164
scoring_system epss
scoring_elements 0.37171
published_at 2026-04-24T12:55:00Z
14
value 0.00164
scoring_system epss
scoring_elements 0.37138
published_at 2026-04-26T12:55:00Z
15
value 0.00164
scoring_system epss
scoring_elements 0.3705
published_at 2026-04-29T12:55:00Z
16
value 0.00164
scoring_system epss
scoring_elements 0.37399
published_at 2026-04-07T12:55:00Z
17
value 0.00164
scoring_system epss
scoring_elements 0.37463
published_at 2026-04-16T12:55:00Z
18
value 0.00164
scoring_system epss
scoring_elements 0.37451
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-65082
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65082
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121926
reference_id 1121926
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121926
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2419139
reference_id 2419139
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2419139
6
reference_url https://httpd.apache.org/security/json/CVE-2025-65082.json
reference_id CVE-2025-65082
reference_type
scores
url https://httpd.apache.org/security/json/CVE-2025-65082.json
7
reference_url https://access.redhat.com/errata/RHSA-2025:23732
reference_id RHSA-2025:23732
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23732
8
reference_url https://access.redhat.com/errata/RHSA-2025:23919
reference_id RHSA-2025:23919
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23919
9
reference_url https://access.redhat.com/errata/RHSA-2025:23932
reference_id RHSA-2025:23932
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23932
10
reference_url https://access.redhat.com/errata/RHSA-2026:2994
reference_id RHSA-2026:2994
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:2994
11
reference_url https://access.redhat.com/errata/RHSA-2026:2995
reference_id RHSA-2026:2995
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:2995
12
reference_url https://access.redhat.com/errata/RHSA-2026:5156
reference_id RHSA-2026:5156
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5156
13
reference_url https://usn.ubuntu.com/7968-1/
reference_id USN-7968-1
reference_type
scores
url https://usn.ubuntu.com/7968-1/
fixed_packages
0
url pkg:apk/alpine/apache2@2.4.66-r0?arch=ppc64le&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/apache2@2.4.66-r0?arch=ppc64le&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/apache2@2.4.66-r0%3Farch=ppc64le&distroversion=v3.23&reponame=main
aliases CVE-2025-65082
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fsh3-7b9j-dfgf
2
url VCID-pru9-2rza-qycd
vulnerability_id VCID-pru9-2rza-qycd
summary 
Server-Side Request Forgery (SSRF) vulnerability 

 in Apache HTTP Server on Windows 

with AllowEncodedSlashes On and MergeSlashes Off  allows to potentially leak NTLM 
hashes to a malicious server via SSRF and malicious requests or content

Users are recommended to upgrade to version 2.4.66, which fixes the issue.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-59775.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-59775.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-59775
reference_id
reference_type
scores
0
value 0.00056
scoring_system epss
scoring_elements 0.17765
published_at 2026-04-04T12:55:00Z
1
value 0.00056
scoring_system epss
scoring_elements 0.17718
published_at 2026-04-02T12:55:00Z
2
value 0.00061
scoring_system epss
scoring_elements 0.18976
published_at 2026-05-14T12:55:00Z
3
value 0.00061
scoring_system epss
scoring_elements 0.18688
published_at 2026-05-05T12:55:00Z
4
value 0.00061
scoring_system epss
scoring_elements 0.18772
published_at 2026-05-07T12:55:00Z
5
value 0.00061
scoring_system epss
scoring_elements 0.18876
published_at 2026-05-09T12:55:00Z
6
value 0.00061
scoring_system epss
scoring_elements 0.18837
published_at 2026-05-11T12:55:00Z
7
value 0.00061
scoring_system epss
scoring_elements 0.18875
published_at 2026-05-12T12:55:00Z
8
value 0.00071
scoring_system epss
scoring_elements 0.2184
published_at 2026-04-11T12:55:00Z
9
value 0.00071
scoring_system epss
scoring_elements 0.21743
published_at 2026-04-13T12:55:00Z
10
value 0.00071
scoring_system epss
scoring_elements 0.21744
published_at 2026-04-16T12:55:00Z
11
value 0.00071
scoring_system epss
scoring_elements 0.2175
published_at 2026-04-18T12:55:00Z
12
value 0.00071
scoring_system epss
scoring_elements 0.21717
published_at 2026-04-21T12:55:00Z
13
value 0.00071
scoring_system epss
scoring_elements 0.2157
published_at 2026-04-24T12:55:00Z
14
value 0.00071
scoring_system epss
scoring_elements 0.21564
published_at 2026-04-26T12:55:00Z
15
value 0.00071
scoring_system epss
scoring_elements 0.21554
published_at 2026-04-29T12:55:00Z
16
value 0.00071
scoring_system epss
scoring_elements 0.2183
published_at 2026-04-09T12:55:00Z
17
value 0.00071
scoring_system epss
scoring_elements 0.21801
published_at 2026-04-12T12:55:00Z
18
value 0.00071
scoring_system epss
scoring_elements 0.21695
published_at 2026-04-07T12:55:00Z
19
value 0.00071
scoring_system epss
scoring_elements 0.21773
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-59775
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2419141
reference_id 2419141
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2419141
3
reference_url https://httpd.apache.org/security/json/CVE-2025-59775.json
reference_id CVE-2025-59775
reference_type
scores
url https://httpd.apache.org/security/json/CVE-2025-59775.json
4
reference_url https://access.redhat.com/errata/RHSA-2026:5156
reference_id RHSA-2026:5156
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5156
fixed_packages
0
url pkg:apk/alpine/apache2@2.4.66-r0?arch=ppc64le&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/apache2@2.4.66-r0?arch=ppc64le&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/apache2@2.4.66-r0%3Farch=ppc64le&distroversion=v3.23&reponame=main
aliases CVE-2025-59775
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pru9-2rza-qycd
3
url VCID-td8g-tmny-jyaa
vulnerability_id VCID-td8g-tmny-jyaa
summary 
An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds.

This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.


Users are recommended to upgrade to version 2.4.66, which fixes the issue.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-55753.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-55753.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-55753
reference_id
reference_type
scores
0
value 0.00046
scoring_system epss
scoring_elements 0.14343
published_at 2026-05-14T12:55:00Z
1
value 0.00046
scoring_system epss
scoring_elements 0.13976
published_at 2026-05-05T12:55:00Z
2
value 0.00046
scoring_system epss
scoring_elements 0.14132
published_at 2026-05-07T12:55:00Z
3
value 0.00046
scoring_system epss
scoring_elements 0.14219
published_at 2026-05-09T12:55:00Z
4
value 0.00046
scoring_system epss
scoring_elements 0.14207
published_at 2026-05-11T12:55:00Z
5
value 0.00046
scoring_system epss
scoring_elements 0.14248
published_at 2026-05-12T12:55:00Z
6
value 0.00072
scoring_system epss
scoring_elements 0.22156
published_at 2026-04-04T12:55:00Z
7
value 0.00072
scoring_system epss
scoring_elements 0.22106
published_at 2026-04-02T12:55:00Z
8
value 0.00104
scoring_system epss
scoring_elements 0.28399
published_at 2026-04-11T12:55:00Z
9
value 0.00104
scoring_system epss
scoring_elements 0.28356
published_at 2026-04-12T12:55:00Z
10
value 0.00104
scoring_system epss
scoring_elements 0.28298
published_at 2026-04-13T12:55:00Z
11
value 0.00104
scoring_system epss
scoring_elements 0.2831
published_at 2026-04-16T12:55:00Z
12
value 0.00104
scoring_system epss
scoring_elements 0.28289
published_at 2026-04-18T12:55:00Z
13
value 0.00104
scoring_system epss
scoring_elements 0.28242
published_at 2026-04-21T12:55:00Z
14
value 0.00104
scoring_system epss
scoring_elements 0.28147
published_at 2026-04-24T12:55:00Z
15
value 0.00104
scoring_system epss
scoring_elements 0.28035
published_at 2026-04-26T12:55:00Z
16
value 0.00104
scoring_system epss
scoring_elements 0.27956
published_at 2026-04-29T12:55:00Z
17
value 0.00104
scoring_system epss
scoring_elements 0.28287
published_at 2026-04-07T12:55:00Z
18
value 0.00104
scoring_system epss
scoring_elements 0.28396
published_at 2026-04-09T12:55:00Z
19
value 0.00104
scoring_system epss
scoring_elements 0.28352
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-55753
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55753
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121926
reference_id 1121926
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121926
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2419140
reference_id 2419140
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2419140
6
reference_url https://httpd.apache.org/security/json/CVE-2025-55753.json
reference_id CVE-2025-55753
reference_type
scores
url https://httpd.apache.org/security/json/CVE-2025-55753.json
7
reference_url https://access.redhat.com/errata/RHSA-2025:23732
reference_id RHSA-2025:23732
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23732
8
reference_url https://access.redhat.com/errata/RHSA-2025:23738
reference_id RHSA-2025:23738
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23738
9
reference_url https://access.redhat.com/errata/RHSA-2025:23739
reference_id RHSA-2025:23739
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23739
10
reference_url https://access.redhat.com/errata/RHSA-2026:0009
reference_id RHSA-2026:0009
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0009
11
reference_url https://access.redhat.com/errata/RHSA-2026:0010
reference_id RHSA-2026:0010
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0010
12
reference_url https://access.redhat.com/errata/RHSA-2026:0011
reference_id RHSA-2026:0011
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0011
13
reference_url https://access.redhat.com/errata/RHSA-2026:0012
reference_id RHSA-2026:0012
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0012
14
reference_url https://access.redhat.com/errata/RHSA-2026:0029
reference_id RHSA-2026:0029
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0029
15
reference_url https://access.redhat.com/errata/RHSA-2026:0030
reference_id RHSA-2026:0030
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0030
16
reference_url https://access.redhat.com/errata/RHSA-2026:0092
reference_id RHSA-2026:0092
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0092
17
reference_url https://access.redhat.com/errata/RHSA-2026:0093
reference_id RHSA-2026:0093
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0093
18
reference_url https://access.redhat.com/errata/RHSA-2026:0094
reference_id RHSA-2026:0094
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:0094
19
reference_url https://access.redhat.com/errata/RHSA-2026:2994
reference_id RHSA-2026:2994
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:2994
20
reference_url https://access.redhat.com/errata/RHSA-2026:2995
reference_id RHSA-2026:2995
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:2995
21
reference_url https://usn.ubuntu.com/7968-1/
reference_id USN-7968-1
reference_type
scores
url https://usn.ubuntu.com/7968-1/
fixed_packages
0
url pkg:apk/alpine/apache2@2.4.66-r0?arch=ppc64le&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/apache2@2.4.66-r0?arch=ppc64le&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/apache2@2.4.66-r0%3Farch=ppc64le&distroversion=v3.23&reponame=main
aliases CVE-2025-55753
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-td8g-tmny-jyaa
4
url VCID-varh-ysfr-euc8
vulnerability_id VCID-varh-ysfr-euc8
summary 
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid.

This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65.

Users are recommended to upgrade to version 2.4.66, which fixes the issue.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-66200.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-66200.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-66200
reference_id
reference_type
scores
0
value 0.00039
scoring_system epss
scoring_elements 0.11746
published_at 2026-05-14T12:55:00Z
1
value 0.00039
scoring_system epss
scoring_elements 0.11484
published_at 2026-05-05T12:55:00Z
2
value 0.00039
scoring_system epss
scoring_elements 0.11621
published_at 2026-05-07T12:55:00Z
3
value 0.00039
scoring_system epss
scoring_elements 0.11673
published_at 2026-05-09T12:55:00Z
4
value 0.00039
scoring_system epss
scoring_elements 0.11644
published_at 2026-05-11T12:55:00Z
5
value 0.00039
scoring_system epss
scoring_elements 0.11686
published_at 2026-05-12T12:55:00Z
6
value 0.00055
scoring_system epss
scoring_elements 0.17519
published_at 2026-04-04T12:55:00Z
7
value 0.00055
scoring_system epss
scoring_elements 0.17472
published_at 2026-04-02T12:55:00Z
8
value 0.0007
scoring_system epss
scoring_elements 0.21602
published_at 2026-04-11T12:55:00Z
9
value 0.0007
scoring_system epss
scoring_elements 0.21564
published_at 2026-04-12T12:55:00Z
10
value 0.0007
scoring_system epss
scoring_elements 0.21507
published_at 2026-04-13T12:55:00Z
11
value 0.0007
scoring_system epss
scoring_elements 0.21504
published_at 2026-04-16T12:55:00Z
12
value 0.0007
scoring_system epss
scoring_elements 0.21512
published_at 2026-04-18T12:55:00Z
13
value 0.0007
scoring_system epss
scoring_elements 0.21479
published_at 2026-04-21T12:55:00Z
14
value 0.0007
scoring_system epss
scoring_elements 0.21332
published_at 2026-04-24T12:55:00Z
15
value 0.0007
scoring_system epss
scoring_elements 0.2133
published_at 2026-04-26T12:55:00Z
16
value 0.0007
scoring_system epss
scoring_elements 0.2131
published_at 2026-04-29T12:55:00Z
17
value 0.0007
scoring_system epss
scoring_elements 0.21456
published_at 2026-04-07T12:55:00Z
18
value 0.0007
scoring_system epss
scoring_elements 0.21591
published_at 2026-04-09T12:55:00Z
19
value 0.0007
scoring_system epss
scoring_elements 0.21532
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-66200
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66200
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66200
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121926
reference_id 1121926
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121926
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2419262
reference_id 2419262
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2419262
6
reference_url https://httpd.apache.org/security/json/CVE-2025-66200.json
reference_id CVE-2025-66200
reference_type
scores
url https://httpd.apache.org/security/json/CVE-2025-66200.json
7
reference_url https://access.redhat.com/errata/RHSA-2025:23732
reference_id RHSA-2025:23732
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23732
8
reference_url https://access.redhat.com/errata/RHSA-2025:23919
reference_id RHSA-2025:23919
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23919
9
reference_url https://access.redhat.com/errata/RHSA-2025:23932
reference_id RHSA-2025:23932
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:23932
10
reference_url https://access.redhat.com/errata/RHSA-2026:2994
reference_id RHSA-2026:2994
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:2994
11
reference_url https://access.redhat.com/errata/RHSA-2026:2995
reference_id RHSA-2026:2995
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:2995
12
reference_url https://access.redhat.com/errata/RHSA-2026:5156
reference_id RHSA-2026:5156
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:5156
13
reference_url https://usn.ubuntu.com/7968-1/
reference_id USN-7968-1
reference_type
scores
url https://usn.ubuntu.com/7968-1/
fixed_packages
0
url pkg:apk/alpine/apache2@2.4.66-r0?arch=ppc64le&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/apache2@2.4.66-r0?arch=ppc64le&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/apache2@2.4.66-r0%3Farch=ppc64le&distroversion=v3.23&reponame=main
aliases CVE-2025-66200
risk_score 2.5
exploitability 0.5
weighted_severity 4.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-varh-ysfr-euc8
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/apache2@2.4.66-r0%3Farch=ppc64le&distroversion=v3.23&reponame=main