Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.pac4j/pac4j-saml@3.3.0
Typemaven
Namespaceorg.pac4j
Namepac4j-saml
Version3.3.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.5.5
Latest_non_vulnerable_version5.3.1
Affected_by_vulnerabilities
0
url VCID-3qb2-jzgv-5kck
vulnerability_id VCID-3qb2-jzgv-5kck
summary Use of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10755
reference_id
reference_type
scores
0
value 0.00312
scoring_system epss
scoring_elements 0.54909
published_at 2026-06-12T12:55:00Z
1
value 0.00312
scoring_system epss
scoring_elements 0.54785
published_at 2026-06-11T12:55:00Z
2
value 0.00312
scoring_system epss
scoring_elements 0.5491
published_at 2026-06-14T12:55:00Z
3
value 0.00312
scoring_system epss
scoring_elements 0.54926
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10755
1
reference_url https://github.com/pac4j/pac4j/commit/34d5b1028a2db201ee81ec51b52a782fe073f609
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pac4j/pac4j/commit/34d5b1028a2db201ee81ec51b52a782fe073f609
2
reference_url https://snyk.io/vuln/SNYK-JAVA-ORGPAC4J-467407
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-JAVA-ORGPAC4J-467407
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-10755
reference_id CVE-2019-10755
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-10755
4
reference_url https://github.com/advisories/GHSA-rc75-cf5c-mxvh
reference_id GHSA-rc75-cf5c-mxvh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rc75-cf5c-mxvh
fixed_packages
0
url pkg:maven/org.pac4j/pac4j-saml@3.8.2
purl pkg:maven/org.pac4j/pac4j-saml@3.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3qb2-jzgv-5kck
1
vulnerability VCID-x4k7-q7vu-4bgk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.pac4j/pac4j-saml@3.8.2
1
url pkg:maven/org.pac4j/pac4j-saml@3.8.3
purl pkg:maven/org.pac4j/pac4j-saml@3.8.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x4k7-q7vu-4bgk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.pac4j/pac4j-saml@3.8.3
2
url pkg:maven/org.pac4j/pac4j-saml@4.0.0-RC1
purl pkg:maven/org.pac4j/pac4j-saml@4.0.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x4k7-q7vu-4bgk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.pac4j/pac4j-saml@4.0.0-RC1
aliases CVE-2019-10755, GHSA-rc75-cf5c-mxvh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3qb2-jzgv-5kck
1
url VCID-x4k7-q7vu-4bgk
vulnerability_id VCID-x4k7-q7vu-4bgk
summary Pac4j token validation bypass if OpenID Connect provider supports none algorithm
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-44878
reference_id
reference_type
scores
0
value 0.00139
scoring_system epss
scoring_elements 0.33915
published_at 2026-06-14T12:55:00Z
1
value 0.00139
scoring_system epss
scoring_elements 0.33737
published_at 2026-06-11T12:55:00Z
2
value 0.00139
scoring_system epss
scoring_elements 0.33937
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-44878
1
reference_url https://github.com/pac4j/pac4j
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pac4j/pac4j
2
reference_url https://github.com/pac4j/pac4j/commit/09684e0de1c4753d22c53b8135d4ef61cfda76f7
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pac4j/pac4j/commit/09684e0de1c4753d22c53b8135d4ef61cfda76f7
3
reference_url https://github.com/pac4j/pac4j/commit/22b82ffd702a132d9f09da60362fc6264fc281ae
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pac4j/pac4j/commit/22b82ffd702a132d9f09da60362fc6264fc281ae
4
reference_url https://github.com/pac4j/pac4j/commit/9c87bbc536ed5d05f940ae015403120df2935589
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pac4j/pac4j/commit/9c87bbc536ed5d05f940ae015403120df2935589
5
reference_url https://openid.net/specs/openid-connect-core-1_0.html#IDToken
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://openid.net/specs/openid-connect-core-1_0.html#IDToken
6
reference_url https://www.pac4j.org/4.5.x/docs/release-notes.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.pac4j.org/4.5.x/docs/release-notes.html
7
reference_url https://www.pac4j.org/blog/cve_2021_44878_is_this_serious.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.pac4j.org/blog/cve_2021_44878_is_this_serious.html
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-44878
reference_id CVE-2021-44878
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-44878
9
reference_url https://github.com/advisories/GHSA-xhw6-hjc9-679m
reference_id GHSA-xhw6-hjc9-679m
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xhw6-hjc9-679m
fixed_packages
0
url pkg:maven/org.pac4j/pac4j-saml@4.5.5
purl pkg:maven/org.pac4j/pac4j-saml@4.5.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.pac4j/pac4j-saml@4.5.5
1
url pkg:maven/org.pac4j/pac4j-saml@5.3.1
purl pkg:maven/org.pac4j/pac4j-saml@5.3.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.pac4j/pac4j-saml@5.3.1
aliases CVE-2021-44878, GHSA-xhw6-hjc9-679m
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x4k7-q7vu-4bgk
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.pac4j/pac4j-saml@3.3.0