Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/fossil@1:2.28-1?distro=trixie
Typedeb
Namespacedebian
Namefossil
Version1:2.28-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-3p7d-zr37-nufa
vulnerability_id VCID-3p7d-zr37-nufa
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-17459
reference_id
reference_type
scores
0
value 0.01561
scoring_system epss
scoring_elements 0.81893
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-17459
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17459
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17459
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://security.gentoo.org/glsa/201801-20
reference_id GLSA-201801-20
reference_type
scores
url https://security.gentoo.org/glsa/201801-20
fixed_packages
0
url pkg:deb/debian/fossil@1:2.4-1?distro=trixie
purl pkg:deb/debian/fossil@1:2.4-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.4-1%3Fdistro=trixie
1
url pkg:deb/debian/fossil@1:2.15.2-1?distro=trixie
purl pkg:deb/debian/fossil@1:2.15.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.15.2-1%3Fdistro=trixie
2
url pkg:deb/debian/fossil@1:2.21-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/fossil@1:2.21-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.21-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/fossil@1:2.26-2?distro=trixie
purl pkg:deb/debian/fossil@1:2.26-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.26-2%3Fdistro=trixie
4
url pkg:deb/debian/fossil@1:2.28-1?distro=trixie
purl pkg:deb/debian/fossil@1:2.28-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.28-1%3Fdistro=trixie
aliases CVE-2017-17459
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3p7d-zr37-nufa
1
url VCID-hb8h-gd14-bfgf
vulnerability_id VCID-hb8h-gd14-bfgf
summary 
Multiple vulnerabilities have been found in Fossil, the worst of
    which could result in the arbitrary execution of code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-24614
reference_id
reference_type
scores
0
value 0.06403
scoring_system epss
scoring_elements 0.91234
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-24614
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24614
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24614
2
reference_url https://security.gentoo.org/glsa/202011-04
reference_id GLSA-202011-04
reference_type
scores
url https://security.gentoo.org/glsa/202011-04
fixed_packages
0
url pkg:deb/debian/fossil@1:2.12.1-1?distro=trixie
purl pkg:deb/debian/fossil@1:2.12.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.12.1-1%3Fdistro=trixie
1
url pkg:deb/debian/fossil@1:2.15.2-1?distro=trixie
purl pkg:deb/debian/fossil@1:2.15.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.15.2-1%3Fdistro=trixie
2
url pkg:deb/debian/fossil@1:2.21-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/fossil@1:2.21-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.21-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/fossil@1:2.26-2?distro=trixie
purl pkg:deb/debian/fossil@1:2.26-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.26-2%3Fdistro=trixie
4
url pkg:deb/debian/fossil@1:2.28-1?distro=trixie
purl pkg:deb/debian/fossil@1:2.28-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.28-1%3Fdistro=trixie
aliases CVE-2020-24614
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hb8h-gd14-bfgf
2
url VCID-mapk-ay8x-q7fr
vulnerability_id VCID-mapk-ay8x-q7fr
summary certificate verification bypass
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-36377
reference_id
reference_type
scores
0
value 0.00105
scoring_system epss
scoring_elements 0.28061
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-36377
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36377
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36377
2
reference_url https://security.archlinux.org/ASA-202108-8
reference_id ASA-202108-8
reference_type
scores
url https://security.archlinux.org/ASA-202108-8
3
reference_url https://security.archlinux.org/AVG-2146
reference_id AVG-2146
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2146
fixed_packages
0
url pkg:deb/debian/fossil@1:2.15.2-1?distro=trixie
purl pkg:deb/debian/fossil@1:2.15.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.15.2-1%3Fdistro=trixie
1
url pkg:deb/debian/fossil@1:2.21-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/fossil@1:2.21-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.21-1%252Bdeb12u1%3Fdistro=trixie
2
url pkg:deb/debian/fossil@1:2.26-2?distro=trixie
purl pkg:deb/debian/fossil@1:2.26-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.26-2%3Fdistro=trixie
3
url pkg:deb/debian/fossil@1:2.28-1?distro=trixie
purl pkg:deb/debian/fossil@1:2.28-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.28-1%3Fdistro=trixie
aliases CVE-2021-36377
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mapk-ay8x-q7fr
3
url VCID-uu2a-g1dv-87gu
vulnerability_id VCID-uu2a-g1dv-87gu
summary Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-34009
reference_id
reference_type
scores
0
value 0.00261
scoring_system epss
scoring_elements 0.4978
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-34009
fixed_packages
0
url pkg:deb/debian/fossil@0?distro=trixie
purl pkg:deb/debian/fossil@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@0%3Fdistro=trixie
1
url pkg:deb/debian/fossil@1:2.15.2-1?distro=trixie
purl pkg:deb/debian/fossil@1:2.15.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.15.2-1%3Fdistro=trixie
2
url pkg:deb/debian/fossil@1:2.21-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/fossil@1:2.21-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.21-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/fossil@1:2.26-2?distro=trixie
purl pkg:deb/debian/fossil@1:2.26-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.26-2%3Fdistro=trixie
4
url pkg:deb/debian/fossil@1:2.28-1?distro=trixie
purl pkg:deb/debian/fossil@1:2.28-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.28-1%3Fdistro=trixie
aliases CVE-2022-34009
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uu2a-g1dv-87gu
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/fossil@1:2.28-1%3Fdistro=trixie