Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/sleuthkit@4.8.0-r1?arch=x86_64&distroversion=v3.13&reponame=community
Typeapk
Namespacealpine
Namesleuthkit
Version4.8.0-r1
Qualifiers
arch x86_64
distroversion v3.13
reponame community
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-2964-k8pv-suf9
vulnerability_id VCID-2964-k8pv-suf9
summary In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-10233
reference_id
reference_type
scores
0
value 0.00543
scoring_system epss
scoring_elements 0.68068
published_at 2026-06-04T12:55:00Z
1
value 0.00543
scoring_system epss
scoring_elements 0.68108
published_at 2026-06-05T12:55:00Z
2
value 0.00543
scoring_system epss
scoring_elements 0.68116
published_at 2026-06-06T12:55:00Z
3
value 0.00543
scoring_system epss
scoring_elements 0.68107
published_at 2026-06-07T12:55:00Z
4
value 0.00543
scoring_system epss
scoring_elements 0.68092
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-10233
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10233
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10233
fixed_packages
0
url pkg:apk/alpine/sleuthkit@4.8.0-r1?arch=x86_64&distroversion=v3.13&reponame=community
purl pkg:apk/alpine/sleuthkit@4.8.0-r1?arch=x86_64&distroversion=v3.13&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/sleuthkit@4.8.0-r1%3Farch=x86_64&distroversion=v3.13&reponame=community
aliases CVE-2020-10233
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2964-k8pv-suf9
1
url VCID-f9pe-6fc1-tkfe
vulnerability_id VCID-f9pe-6fc1-tkfe
summary In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-10232
reference_id
reference_type
scores
0
value 0.01403
scoring_system epss
scoring_elements 0.80809
published_at 2026-06-07T12:55:00Z
1
value 0.01403
scoring_system epss
scoring_elements 0.80805
published_at 2026-06-08T12:55:00Z
2
value 0.01411
scoring_system epss
scoring_elements 0.80874
published_at 2026-06-04T12:55:00Z
3
value 0.01411
scoring_system epss
scoring_elements 0.80902
published_at 2026-06-05T12:55:00Z
4
value 0.01411
scoring_system epss
scoring_elements 0.80904
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-10232
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10232
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10232
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953976
reference_id 953976
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953976
fixed_packages
0
url pkg:apk/alpine/sleuthkit@4.8.0-r1?arch=x86_64&distroversion=v3.13&reponame=community
purl pkg:apk/alpine/sleuthkit@4.8.0-r1?arch=x86_64&distroversion=v3.13&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/sleuthkit@4.8.0-r1%3Farch=x86_64&distroversion=v3.13&reponame=community
aliases CVE-2020-10232
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f9pe-6fc1-tkfe
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/sleuthkit@4.8.0-r1%3Farch=x86_64&distroversion=v3.13&reponame=community