Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/tiff@4.0.10-r0?arch=x86&distroversion=v3.8&reponame=main
Typeapk
Namespacealpine
Nametiff
Version4.0.10-r0
Qualifiers
arch x86
distroversion v3.8
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version4.0.10-r1
Latest_non_vulnerable_version4.0.10-r3
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-6vbx-9hme-ckgy
vulnerability_id VCID-6vbx-9hme-ckgy
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18557.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18557.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-18557
reference_id
reference_type
scores
0
value 0.23568
scoring_system epss
scoring_elements 0.9609
published_at 2026-06-06T12:55:00Z
1
value 0.23568
scoring_system epss
scoring_elements 0.96096
published_at 2026-06-09T12:55:00Z
2
value 0.23568
scoring_system epss
scoring_elements 0.96082
published_at 2026-06-04T12:55:00Z
3
value 0.23568
scoring_system epss
scoring_elements 0.96091
published_at 2026-06-08T12:55:00Z
4
value 0.23568
scoring_system epss
scoring_elements 0.96087
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-18557
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11613
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11613
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17095
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17095
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10963
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10963
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15209
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15209
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16335
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16335
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17101
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17101
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18557
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18557
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5784
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5784
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7456
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7456
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8905
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8905
12
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1644229
reference_id 1644229
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1644229
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911635
reference_id 911635
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911635
15
reference_url https://security.archlinux.org/ASA-201811-17
reference_id ASA-201811-17
reference_type
scores
url https://security.archlinux.org/ASA-201811-17
16
reference_url https://security.archlinux.org/ASA-201811-18
reference_id ASA-201811-18
reference_type
scores
url https://security.archlinux.org/ASA-201811-18
17
reference_url https://security.archlinux.org/AVG-790
reference_id AVG-790
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-790
18
reference_url https://security.archlinux.org/AVG-791
reference_id AVG-791
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-791
19
reference_url https://bugs.chromium.org/p/project-zero/issues/detail?id=1697
reference_id CVE-2018-18557
reference_type exploit
scores
url https://bugs.chromium.org/p/project-zero/issues/detail?id=1697
20
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/45694.c
reference_id CVE-2018-18557
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/45694.c
21
reference_url https://security.gentoo.org/glsa/201904-15
reference_id GLSA-201904-15
reference_type
scores
url https://security.gentoo.org/glsa/201904-15
22
reference_url https://access.redhat.com/errata/RHSA-2019:2053
reference_id RHSA-2019:2053
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2053
23
reference_url https://usn.ubuntu.com/3864-1/
reference_id USN-3864-1
reference_type
scores
url https://usn.ubuntu.com/3864-1/
24
reference_url https://usn.ubuntu.com/3906-2/
reference_id USN-3906-2
reference_type
scores
url https://usn.ubuntu.com/3906-2/
fixed_packages
0
url pkg:apk/alpine/tiff@4.0.10-r0?arch=x86&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/tiff@4.0.10-r0?arch=x86&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.10-r0%3Farch=x86&distroversion=v3.8&reponame=main
aliases CVE-2018-18557
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6vbx-9hme-ckgy
1
url VCID-7fq4-rz4j-nye3
vulnerability_id VCID-7fq4-rz4j-nye3
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18661.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18661.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-18661
reference_id
reference_type
scores
0
value 0.00185
scoring_system epss
scoring_elements 0.40023
published_at 2026-06-09T12:55:00Z
1
value 0.00185
scoring_system epss
scoring_elements 0.40061
published_at 2026-06-06T12:55:00Z
2
value 0.00185
scoring_system epss
scoring_elements 0.40033
published_at 2026-06-07T12:55:00Z
3
value 0.00185
scoring_system epss
scoring_elements 0.40006
published_at 2026-06-08T12:55:00Z
4
value 0.00185
scoring_system epss
scoring_elements 0.39977
published_at 2026-06-04T12:55:00Z
5
value 0.00185
scoring_system epss
scoring_elements 0.40058
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-18661
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18661
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18661
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1644448
reference_id 1644448
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1644448
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=912012
reference_id 912012
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=912012
6
reference_url https://security.archlinux.org/ASA-201811-17
reference_id ASA-201811-17
reference_type
scores
url https://security.archlinux.org/ASA-201811-17
7
reference_url https://security.archlinux.org/ASA-201811-18
reference_id ASA-201811-18
reference_type
scores
url https://security.archlinux.org/ASA-201811-18
8
reference_url https://security.archlinux.org/AVG-790
reference_id AVG-790
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-790
9
reference_url https://security.archlinux.org/AVG-791
reference_id AVG-791
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-791
10
reference_url https://access.redhat.com/errata/RHSA-2019:2053
reference_id RHSA-2019:2053
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2053
11
reference_url https://usn.ubuntu.com/3864-1/
reference_id USN-3864-1
reference_type
scores
url https://usn.ubuntu.com/3864-1/
fixed_packages
0
url pkg:apk/alpine/tiff@4.0.10-r0?arch=x86&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/tiff@4.0.10-r0?arch=x86&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.10-r0%3Farch=x86&distroversion=v3.8&reponame=main
aliases CVE-2018-18661
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7fq4-rz4j-nye3
2
url VCID-ayaa-beyt-xkcu
vulnerability_id VCID-ayaa-beyt-xkcu
summary Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12900.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12900.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-12900
reference_id
reference_type
scores
0
value 0.09894
scoring_system epss
scoring_elements 0.93143
published_at 2026-06-04T12:55:00Z
1
value 0.09894
scoring_system epss
scoring_elements 0.93155
published_at 2026-06-05T12:55:00Z
2
value 0.09894
scoring_system epss
scoring_elements 0.93154
published_at 2026-06-06T12:55:00Z
3
value 0.09894
scoring_system epss
scoring_elements 0.93151
published_at 2026-06-07T12:55:00Z
4
value 0.09894
scoring_system epss
scoring_elements 0.93149
published_at 2026-06-08T12:55:00Z
5
value 0.09894
scoring_system epss
scoring_elements 0.93158
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-12900
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12900
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12900
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17000
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17000
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17100
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17100
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19210
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19210
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14973
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14973
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17546
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17546
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7663
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7663
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1595575
reference_id 1595575
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1595575
11
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=902718
reference_id 902718
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=902718
12
reference_url https://access.redhat.com/errata/RHSA-2019:2053
reference_id RHSA-2019:2053
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2053
13
reference_url https://access.redhat.com/errata/RHSA-2019:3419
reference_id RHSA-2019:3419
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:3419
14
reference_url https://usn.ubuntu.com/3906-1/
reference_id USN-3906-1
reference_type
scores
url https://usn.ubuntu.com/3906-1/
15
reference_url https://usn.ubuntu.com/3906-2/
reference_id USN-3906-2
reference_type
scores
url https://usn.ubuntu.com/3906-2/
fixed_packages
0
url pkg:apk/alpine/tiff@4.0.10-r0?arch=x86&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/tiff@4.0.10-r0?arch=x86&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.10-r0%3Farch=x86&distroversion=v3.8&reponame=main
aliases CVE-2018-12900
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ayaa-beyt-xkcu
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.10-r0%3Farch=x86&distroversion=v3.8&reponame=main