Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:gem/decidim@0.30.4
Typegem
Namespace
Namedecidim
Version0.30.4
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-qsud-c4qy-2ba8
vulnerability_id VCID-qsud-c4qy-2ba8
summary Decidim is a participatory democracy framework. In versions from 0.30.0 to before 0.30.4 and from 0.31.0.rc1 to before 0.31.0, the private data exports can lead to data leaks in case the UUID generation, causing collisions for the generated UUIDs. This issue has been patched in versions 0.30.4 and 0.31.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-65017
reference_id
reference_type
scores
0
value 0.00054
scoring_system epss
scoring_elements 0.17467
published_at 2026-06-12T12:55:00Z
1
value 0.00054
scoring_system epss
scoring_elements 0.17455
published_at 2026-06-14T12:55:00Z
2
value 0.00054
scoring_system epss
scoring_elements 0.17304
published_at 2026-06-11T12:55:00Z
3
value 0.00054
scoring_system epss
scoring_elements 0.17483
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-65017
1
reference_url https://github.com/decidim/decidim
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/decidim/decidim
2
reference_url https://github.com/decidim/decidim/pull/13571
reference_id 13571
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-02-03T17:09:13Z/
url https://github.com/decidim/decidim/pull/13571
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-65017
reference_id CVE-2025-65017
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-65017
4
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/decidim-core/CVE-2025-65017.yml
reference_id CVE-2025-65017.YML
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/decidim-core/CVE-2025-65017.yml
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/decidim/CVE-2025-65017.yml
reference_id CVE-2025-65017.YML
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/decidim/CVE-2025-65017.yml
6
reference_url https://github.com/advisories/GHSA-3cx6-j9j4-54mp
reference_id GHSA-3cx6-j9j4-54mp
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3cx6-j9j4-54mp
7
reference_url https://github.com/decidim/decidim/security/advisories/GHSA-3cx6-j9j4-54mp
reference_id GHSA-3cx6-j9j4-54mp
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-02-03T17:09:13Z/
url https://github.com/decidim/decidim/security/advisories/GHSA-3cx6-j9j4-54mp
8
reference_url https://github.com/decidim/decidim/releases/tag/v0.30.4
reference_id v0.30.4
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-02-03T17:09:13Z/
url https://github.com/decidim/decidim/releases/tag/v0.30.4
9
reference_url https://github.com/decidim/decidim/releases/tag/v0.31.0
reference_id v0.31.0
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-02-03T17:09:13Z/
url https://github.com/decidim/decidim/releases/tag/v0.31.0
fixed_packages
0
url pkg:gem/decidim@0.31.0
purl pkg:gem/decidim@0.31.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-qsud-c4qy-2ba8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/decidim@0.31.0
aliases CVE-2025-65017, GHSA-3cx6-j9j4-54mp
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qsud-c4qy-2ba8
Fixing_vulnerabilities
0
url VCID-qsud-c4qy-2ba8
vulnerability_id VCID-qsud-c4qy-2ba8
summary Decidim is a participatory democracy framework. In versions from 0.30.0 to before 0.30.4 and from 0.31.0.rc1 to before 0.31.0, the private data exports can lead to data leaks in case the UUID generation, causing collisions for the generated UUIDs. This issue has been patched in versions 0.30.4 and 0.31.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-65017
reference_id
reference_type
scores
0
value 0.00054
scoring_system epss
scoring_elements 0.17467
published_at 2026-06-12T12:55:00Z
1
value 0.00054
scoring_system epss
scoring_elements 0.17455
published_at 2026-06-14T12:55:00Z
2
value 0.00054
scoring_system epss
scoring_elements 0.17304
published_at 2026-06-11T12:55:00Z
3
value 0.00054
scoring_system epss
scoring_elements 0.17483
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-65017
1
reference_url https://github.com/decidim/decidim
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/decidim/decidim
2
reference_url https://github.com/decidim/decidim/pull/13571
reference_id 13571
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-02-03T17:09:13Z/
url https://github.com/decidim/decidim/pull/13571
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-65017
reference_id CVE-2025-65017
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-65017
4
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/decidim-core/CVE-2025-65017.yml
reference_id CVE-2025-65017.YML
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/decidim-core/CVE-2025-65017.yml
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/decidim/CVE-2025-65017.yml
reference_id CVE-2025-65017.YML
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/decidim/CVE-2025-65017.yml
6
reference_url https://github.com/advisories/GHSA-3cx6-j9j4-54mp
reference_id GHSA-3cx6-j9j4-54mp
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3cx6-j9j4-54mp
7
reference_url https://github.com/decidim/decidim/security/advisories/GHSA-3cx6-j9j4-54mp
reference_id GHSA-3cx6-j9j4-54mp
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-02-03T17:09:13Z/
url https://github.com/decidim/decidim/security/advisories/GHSA-3cx6-j9j4-54mp
8
reference_url https://github.com/decidim/decidim/releases/tag/v0.30.4
reference_id v0.30.4
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-02-03T17:09:13Z/
url https://github.com/decidim/decidim/releases/tag/v0.30.4
9
reference_url https://github.com/decidim/decidim/releases/tag/v0.31.0
reference_id v0.31.0
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-02-03T17:09:13Z/
url https://github.com/decidim/decidim/releases/tag/v0.31.0
fixed_packages
0
url pkg:gem/decidim@0.30.4
purl pkg:gem/decidim@0.30.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-qsud-c4qy-2ba8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/decidim@0.30.4
1
url pkg:gem/decidim@0.31.0
purl pkg:gem/decidim@0.31.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-qsud-c4qy-2ba8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/decidim@0.31.0
aliases CVE-2025-65017, GHSA-3cx6-j9j4-54mp
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qsud-c4qy-2ba8
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:gem/decidim@0.30.4