Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/rendr@0.4.5
Typenpm
Namespace
Namerendr
Version0.4.5
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.1.4
Latest_non_vulnerable_version1.1.4
Affected_by_vulnerabilities
0
url VCID-7ubj-ffrm-4yd5
vulnerability_id VCID-7ubj-ffrm-4yd5
summary XSS in client rendered block templates in rendr
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-1000230
reference_id
reference_type
scores
0
value 0.00713
scoring_system epss
scoring_elements 0.72865
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-1000230
1
reference_url https://github.com/rendrjs/rendr-handlebars
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rendrjs/rendr-handlebars
2
reference_url https://github.com/rendrjs/rendr-handlebars/pull/61
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rendrjs/rendr-handlebars/pull/61
3
reference_url https://github.com/rendrjs/rendr/pull/513
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rendrjs/rendr/pull/513
4
reference_url https://www.npmjs.com/advisories/128
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.npmjs.com/advisories/128
5
reference_url https://github.com/nodejs/security-wg/blob/main/vuln/npm/128.json
reference_id 128
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements
url https://github.com/nodejs/security-wg/blob/main/vuln/npm/128.json
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-1000230
reference_id CVE-2016-1000230
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-1000230
7
reference_url https://github.com/advisories/GHSA-v5hp-35hw-cw5x
reference_id GHSA-v5hp-35hw-cw5x
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v5hp-35hw-cw5x
fixed_packages
0
url pkg:npm/rendr@1.1.4
purl pkg:npm/rendr@1.1.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/rendr@1.1.4
aliases CVE-2016-1000230, GHSA-v5hp-35hw-cw5x, GMS-2020-765
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7ubj-ffrm-4yd5
1
url VCID-zqv8-22m7-bqbc
vulnerability_id VCID-zqv8-22m7-bqbc
summary 
XSS in client rendered block templates
There's a cross site scripting (XSS) issue when rendered inside a `_block` during client side rendering. Server side rendering is not affected and is properly escaped.
references
0
reference_url https://github.com/rendrjs/rendr-handlebars/pull/61
reference_id
reference_type
scores
url https://github.com/rendrjs/rendr-handlebars/pull/61
1
reference_url https://github.com/rendrjs/rendr/pull/513
reference_id
reference_type
scores
url https://github.com/rendrjs/rendr/pull/513
fixed_packages
0
url pkg:npm/rendr@1.1.4
purl pkg:npm/rendr@1.1.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/rendr@1.1.4
aliases GMS-2016-53
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zqv8-22m7-bqbc
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/rendr@0.4.5