Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/eza@0.18.2-r0?arch=riscv64&distroversion=v3.20&reponame=community
Typeapk
Namespacealpine
Nameeza
Version0.18.2-r0
Qualifiers
arch riscv64
distroversion v3.20
reponame community
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-w97m-hhay-bue8
vulnerability_id VCID-w97m-hhay-bue8
summary libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to `git_index_add` can cause heap corruption that could be leveraged for arbitrary code execution. There is an issue in the `has_dir_name` function in `src/libgit2/index.c`, which frees an entry that should not be freed. The freed entry is later used and overwritten with potentially bad actor-controlled data leading to controlled heap corruption. Depending on the application that uses libgit2, this could lead to arbitrary code execution. This issue has been patched in version 1.6.5 and 1.7.2.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-24577.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-24577.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-24577
reference_id
reference_type
scores
0
value 0.00376
scoring_system epss
scoring_elements 0.59505
published_at 2026-06-08T12:55:00Z
1
value 0.00376
scoring_system epss
scoring_elements 0.59529
published_at 2026-06-05T12:55:00Z
2
value 0.00376
scoring_system epss
scoring_elements 0.59533
published_at 2026-06-06T12:55:00Z
3
value 0.00376
scoring_system epss
scoring_elements 0.59524
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-24577
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24577
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24577
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1063416
reference_id 1063416
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1063416
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2263095
reference_id 2263095
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2263095
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4M3P7WIEPXNRLBINQRJFXUSTNKBCHYC7/
reference_id 4M3P7WIEPXNRLBINQRJFXUSTNKBCHYC7
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-08T18:43:07Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4M3P7WIEPXNRLBINQRJFXUSTNKBCHYC7/
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7CNDW3PF6NHO7OXNM5GN6WSSGAMA7MZE/
reference_id 7CNDW3PF6NHO7OXNM5GN6WSSGAMA7MZE
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-08T18:43:07Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7CNDW3PF6NHO7OXNM5GN6WSSGAMA7MZE/
8
reference_url https://github.com/libgit2/libgit2/security/advisories/GHSA-j2v7-4f6v-gpg8
reference_id GHSA-j2v7-4f6v-gpg8
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-08T18:43:07Z/
url https://github.com/libgit2/libgit2/security/advisories/GHSA-j2v7-4f6v-gpg8
9
reference_url https://lists.debian.org/debian-lts-announce/2024/02/msg00012.html
reference_id msg00012.html
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-08T18:43:07Z/
url https://lists.debian.org/debian-lts-announce/2024/02/msg00012.html
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S635BGHHZUMRPI7QOXOJ45QHDD5FFZ3S/
reference_id S635BGHHZUMRPI7QOXOJ45QHDD5FFZ3S
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-08T18:43:07Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S635BGHHZUMRPI7QOXOJ45QHDD5FFZ3S/
11
reference_url https://usn.ubuntu.com/6678-1/
reference_id USN-6678-1
reference_type
scores
url https://usn.ubuntu.com/6678-1/
12
reference_url https://github.com/libgit2/libgit2/releases/tag/v1.6.5
reference_id v1.6.5
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-08T18:43:07Z/
url https://github.com/libgit2/libgit2/releases/tag/v1.6.5
13
reference_url https://github.com/libgit2/libgit2/releases/tag/v1.7.2
reference_id v1.7.2
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-08T18:43:07Z/
url https://github.com/libgit2/libgit2/releases/tag/v1.7.2
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z6MXOX7I43OWNN7R6M54XLG6U5RXY244/
reference_id Z6MXOX7I43OWNN7R6M54XLG6U5RXY244
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-08T18:43:07Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z6MXOX7I43OWNN7R6M54XLG6U5RXY244/
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGNHOEE2RBLH7KCJUPUNYG4CDTW4HTBT/
reference_id ZGNHOEE2RBLH7KCJUPUNYG4CDTW4HTBT
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-08T18:43:07Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGNHOEE2RBLH7KCJUPUNYG4CDTW4HTBT/
fixed_packages
0
url pkg:apk/alpine/eza@0.18.2-r0?arch=riscv64&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/eza@0.18.2-r0?arch=riscv64&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/eza@0.18.2-r0%3Farch=riscv64&distroversion=v3.20&reponame=community
aliases CVE-2024-24577
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w97m-hhay-bue8
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/eza@0.18.2-r0%3Farch=riscv64&distroversion=v3.20&reponame=community