Lookup for vulnerable packages by Package URL.

Purlpkg:npm/dojo@1.8.13
Typenpm
Namespace
Namedojo
Version1.8.13
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.17.0
Latest_non_vulnerable_version2.0.0-alpha.5
Affected_by_vulnerabilities
0
url VCID-axzg-9rug-83h6
vulnerability_id VCID-axzg-9rug-83h6
summary dojox vulnerable to unescaped string injection
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15494.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15494.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-15494
reference_id
reference_type
scores
0
value 0.00704
scoring_system epss
scoring_elements 0.72564
published_at 2026-06-11T12:55:00Z
1
value 0.00704
scoring_system epss
scoring_elements 0.72654
published_at 2026-06-14T12:55:00Z
2
value 0.00704
scoring_system epss
scoring_elements 0.72656
published_at 2026-06-13T12:55:00Z
3
value 0.00704
scoring_system epss
scoring_elements 0.72642
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-15494
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15494
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15494
3
reference_url https://dojotoolkit.org/blog/dojo-1-14-released
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://dojotoolkit.org/blog/dojo-1-14-released
4
reference_url https://github.com/dojo/dojox
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/dojo/dojox
5
reference_url https://github.com/dojo/dojox/pull/283
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/dojo/dojox/pull/283
6
reference_url https://lists.debian.org/debian-lts-announce/2018/09/msg00002.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2018/09/msg00002.html
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1620362
reference_id 1620362
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1620362
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906540
reference_id 906540
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906540
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-15494
reference_id CVE-2018-15494
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-15494
10
reference_url https://github.com/advisories/GHSA-84cm-x2q5-8225
reference_id GHSA-84cm-x2q5-8225
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-84cm-x2q5-8225
11
reference_url https://usn.ubuntu.com/7569-1/
reference_id USN-7569-1
reference_type
scores
url https://usn.ubuntu.com/7569-1/
fixed_packages
0
url pkg:npm/dojo@1.14.0
purl pkg:npm/dojo@1.14.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-yjbb-bqwz-tfd9
1
vulnerability VCID-zdmu-4wde-3ufc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dojo@1.14.0
aliases CVE-2018-15494, GHSA-84cm-x2q5-8225
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-axzg-9rug-83h6
1
url VCID-hn24-qggt-83g3
vulnerability_id VCID-hn24-qggt-83g3
summary Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js in the DOH that can result in Victim attacked through their browser - deliver malware, steal HTTP cookies, bypass CORS trust. This attack appear to be exploitable via Victims are typically lured to a web site under the attacker's control; the XSS vulnerability on the target domain is silently exploited without the victim's knowledge. This vulnerability appears to have been fixed in 1.14.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000665.json
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000665.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000665
reference_id
reference_type
scores
0
value 0.00151
scoring_system epss
scoring_elements 0.35471
published_at 2026-06-11T12:55:00Z
1
value 0.00151
scoring_system epss
scoring_elements 0.35651
published_at 2026-06-12T12:55:00Z
2
value 0.00151
scoring_system epss
scoring_elements 0.35672
published_at 2026-06-13T12:55:00Z
3
value 0.00151
scoring_system epss
scoring_elements 0.35656
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000665
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000665
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000665
3
reference_url https://dojotoolkit.org/blog/dojo-1-14-released
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://dojotoolkit.org/blog/dojo-1-14-released
4
reference_url https://github.com/dojo/dojo
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/dojo/dojo
5
reference_url https://github.com/dojo/dojo/pull/307
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/dojo/dojo/pull/307
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1000665
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-1000665
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1626251
reference_id 1626251
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1626251
8
reference_url https://github.com/advisories/GHSA-vmq9-cm7m-4p8p
reference_id GHSA-vmq9-cm7m-4p8p
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vmq9-cm7m-4p8p
fixed_packages
0
url pkg:npm/dojo@1.13.1
purl pkg:npm/dojo@1.13.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-axzg-9rug-83h6
1
vulnerability VCID-yjbb-bqwz-tfd9
2
vulnerability VCID-zdmu-4wde-3ufc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dojo@1.13.1
1
url pkg:npm/dojo@1.14.0
purl pkg:npm/dojo@1.14.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-yjbb-bqwz-tfd9
1
vulnerability VCID-zdmu-4wde-3ufc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dojo@1.14.0
aliases CVE-2018-1000665, GHSA-vmq9-cm7m-4p8p
risk_score 3.6
exploitability 0.5
weighted_severity 7.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hn24-qggt-83g3
2
url VCID-yjbb-bqwz-tfd9
vulnerability_id VCID-yjbb-bqwz-tfd9
summary Prototype pollution in dojo
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5258.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5258.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-5258
reference_id
reference_type
scores
0
value 0.0154
scoring_system epss
scoring_elements 0.81831
published_at 2026-06-12T12:55:00Z
1
value 0.0154
scoring_system epss
scoring_elements 0.8177
published_at 2026-06-11T12:55:00Z
2
value 0.0154
scoring_system epss
scoring_elements 0.81833
published_at 2026-06-14T12:55:00Z
3
value 0.0154
scoring_system epss
scoring_elements 0.8184
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-5258
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5258
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5258
3
reference_url https://github.com/dojo/dojo
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dojo/dojo
4
reference_url https://github.com/dojo/dojo/commit/20a00afb68f5587946dc76fbeaa68c39bda2171d
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dojo/dojo/commit/20a00afb68f5587946dc76fbeaa68c39bda2171d
5
reference_url https://lists.apache.org/thread.html/r3638722360d7ae95f874280518b8d987d799a76df7a9cd78eac33a1b@%3Cusers.qpid.apache.org%3E
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r3638722360d7ae95f874280518b8d987d799a76df7a9cd78eac33a1b@%3Cusers.qpid.apache.org%3E
6
reference_url https://lists.apache.org/thread.html/r665fcc152bd0fec9f71511a6c2435ff24d3a71386b01b1a6df326fd3@%3Cusers.qpid.apache.org%3E
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r665fcc152bd0fec9f71511a6c2435ff24d3a71386b01b1a6df326fd3@%3Cusers.qpid.apache.org%3E
7
reference_url https://lists.apache.org/thread.html/rf481b3f25f05c52ba4e24991a941c1a6e88d281c6c9360a806554d00@%3Cusers.qpid.apache.org%3E
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rf481b3f25f05c52ba4e24991a941c1a6e88d281c6c9360a806554d00@%3Cusers.qpid.apache.org%3E
8
reference_url https://lists.debian.org/debian-lts-announce/2020/03/msg00012.html
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/03/msg00012.html
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1812404
reference_id 1812404
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1812404
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953585
reference_id 953585
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953585
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-5258
reference_id CVE-2020-5258
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-5258
12
reference_url https://github.com/advisories/GHSA-jxfh-8wgv-vfr2
reference_id GHSA-jxfh-8wgv-vfr2
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jxfh-8wgv-vfr2
13
reference_url https://github.com/dojo/dojo/security/advisories/GHSA-jxfh-8wgv-vfr2
reference_id GHSA-jxfh-8wgv-vfr2
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dojo/dojo/security/advisories/GHSA-jxfh-8wgv-vfr2
fixed_packages
0
url pkg:npm/dojo@1.11.10
purl pkg:npm/dojo@1.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zdmu-4wde-3ufc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dojo@1.11.10
1
url pkg:npm/dojo@1.12.8
purl pkg:npm/dojo@1.12.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zdmu-4wde-3ufc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dojo@1.12.8
2
url pkg:npm/dojo@1.13.7
purl pkg:npm/dojo@1.13.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zdmu-4wde-3ufc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dojo@1.13.7
3
url pkg:npm/dojo@1.14.0-pre
purl pkg:npm/dojo@1.14.0-pre
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-axzg-9rug-83h6
1
vulnerability VCID-zdmu-4wde-3ufc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dojo@1.14.0-pre
4
url pkg:npm/dojo@1.14.6
purl pkg:npm/dojo@1.14.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zdmu-4wde-3ufc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dojo@1.14.6
5
url pkg:npm/dojo@1.15.3
purl pkg:npm/dojo@1.15.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zdmu-4wde-3ufc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dojo@1.15.3
6
url pkg:npm/dojo@1.16.2
purl pkg:npm/dojo@1.16.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zdmu-4wde-3ufc
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dojo@1.16.2
7
url pkg:npm/dojo@2.0.0-alpha.5
purl pkg:npm/dojo@2.0.0-alpha.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dojo@2.0.0-alpha.5
aliases CVE-2020-5258, GHSA-jxfh-8wgv-vfr2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yjbb-bqwz-tfd9
3
url VCID-zdmu-4wde-3ufc
vulnerability_id VCID-zdmu-4wde-3ufc
summary Prototype Pollution in dojo
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-23450.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-23450.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-23450
reference_id
reference_type
scores
0
value 0.01995
scoring_system epss
scoring_elements 0.8407
published_at 2026-06-12T12:55:00Z
1
value 0.01995
scoring_system epss
scoring_elements 0.84073
published_at 2026-06-14T12:55:00Z
2
value 0.01995
scoring_system epss
scoring_elements 0.84013
published_at 2026-06-11T12:55:00Z
3
value 0.01995
scoring_system epss
scoring_elements 0.84077
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-23450
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23450
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23450
3
reference_url https://github.com/dojo/dojo
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dojo/dojo
4
reference_url https://github.com/dojo/dojo/blob/4c39c14349408fc8274e19b399ffc660512ed07c/_base/lang.js%23L172
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dojo/dojo/blob/4c39c14349408fc8274e19b399ffc660512ed07c/_base/lang.js%23L172
5
reference_url https://lists.debian.org/debian-lts-announce/2023/01/msg00030.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2023/01/msg00030.html
6
reference_url https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-2313036
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-2313036
7
reference_url https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2313035
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2313035
8
reference_url https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBDOJO-2313034
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBDOJO-2313034
9
reference_url https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2313033
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2313033
10
reference_url https://snyk.io/vuln/SNYK-JS-DOJO-1535223
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-JS-DOJO-1535223
11
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014785
reference_id 1014785
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014785
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2035012
reference_id 2035012
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2035012
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-23450
reference_id CVE-2021-23450
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-23450
14
reference_url https://github.com/advisories/GHSA-m8gw-hjpr-rjv7
reference_id GHSA-m8gw-hjpr-rjv7
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m8gw-hjpr-rjv7
15
reference_url https://usn.ubuntu.com/7569-1/
reference_id USN-7569-1
reference_type
scores
url https://usn.ubuntu.com/7569-1/
fixed_packages
0
url pkg:npm/dojo@1.17.0
purl pkg:npm/dojo@1.17.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dojo@1.17.0
1
url pkg:npm/dojo@2.0.0-alpha.5
purl pkg:npm/dojo@2.0.0-alpha.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dojo@2.0.0-alpha.5
aliases CVE-2021-23450, GHSA-m8gw-hjpr-rjv7
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zdmu-4wde-3ufc
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/dojo@1.8.13