Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/joplin@1.0.99
Typenpm
Namespace
Namejoplin
Version1.0.99
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-1aj9-yyyw-e7f1
vulnerability_id VCID-1aj9-yyyw-e7f1
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-23431
reference_id
reference_type
scores
0
value 0.00138
scoring_system epss
scoring_elements 0.33528
published_at 2026-06-11T12:55:00Z
1
value 0.00138
scoring_system epss
scoring_elements 0.33709
published_at 2026-06-12T12:55:00Z
2
value 0.00138
scoring_system epss
scoring_elements 0.33731
published_at 2026-06-13T12:55:00Z
3
value 0.00138
scoring_system epss
scoring_elements 0.33705
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-23431
1
reference_url https://github.com/laurent22/joplin/commit/19b45de2981c09f6f387498ef96d32b4811eba5e
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laurent22/joplin/commit/19b45de2981c09f6f387498ef96d32b4811eba5e
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-23431
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-23431
3
reference_url https://snyk.io/vuln/SNYK-JS-JOPLIN-1325537
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-JS-JOPLIN-1325537
4
reference_url https://github.com/advisories/GHSA-gjwp-7v3g-99pj
reference_id GHSA-gjwp-7v3g-99pj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gjwp-7v3g-99pj
fixed_packages
0
url pkg:npm/joplin@2.3.2
purl pkg:npm/joplin@2.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kuw3-jv1d-hkgg
1
vulnerability VCID-n9hv-tu62-k7gn
2
vulnerability VCID-p5ps-1twg-hkbs
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/joplin@2.3.2
aliases CVE-2021-23431, GHSA-gjwp-7v3g-99pj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1aj9-yyyw-e7f1
1
url VCID-3wem-jqp1-mfd6
vulnerability_id VCID-3wem-jqp1-mfd6
summary Joplin Cross Site Scripting Vulnerability via NOSCRIPT tags
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-33295
reference_id
reference_type
scores
0
value 0.00263
scoring_system epss
scoring_elements 0.50164
published_at 2026-06-12T12:55:00Z
1
value 0.00263
scoring_system epss
scoring_elements 0.50029
published_at 2026-06-11T12:55:00Z
2
value 0.00263
scoring_system epss
scoring_elements 0.50167
published_at 2026-06-14T12:55:00Z
3
value 0.00263
scoring_system epss
scoring_elements 0.50182
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-33295
1
reference_url https://github.com/laurent22/joplin/commit/9c20d5947d1fa4678a8b640792ff3d31224f0adf
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laurent22/joplin/commit/9c20d5947d1fa4678a8b640792ff3d31224f0adf
2
reference_url https://github.com/laurent22/joplin/releases/tag/v1.8.5
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laurent22/joplin/releases/tag/v1.8.5
3
reference_url https://the-it-wonders.blogspot.com/2021/05/joplin-app-desktop-version-vulnerable.html
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://the-it-wonders.blogspot.com/2021/05/joplin-app-desktop-version-vulnerable.html
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-33295
reference_id CVE-2021-33295
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-33295
5
reference_url https://github.com/advisories/GHSA-phj8-2p6x-hq5r
reference_id GHSA-phj8-2p6x-hq5r
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-phj8-2p6x-hq5r
fixed_packages
0
url pkg:npm/joplin@1.8.5
purl pkg:npm/joplin@1.8.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/joplin@1.8.5
1
url pkg:npm/joplin@2.0.1
purl pkg:npm/joplin@2.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1aj9-yyyw-e7f1
1
vulnerability VCID-cj22-b24b-tufz
2
vulnerability VCID-kuw3-jv1d-hkgg
3
vulnerability VCID-n9hv-tu62-k7gn
4
vulnerability VCID-p5ps-1twg-hkbs
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/joplin@2.0.1
aliases CVE-2021-33295, GHSA-phj8-2p6x-hq5r
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3wem-jqp1-mfd6
2
url VCID-bv9s-n5cc-83ba
vulnerability_id VCID-bv9s-n5cc-83ba
summary Cross-site Scripting in Joplin
references
0
reference_url http://packetstormsecurity.com/files/156582/Joplin-Desktop-1.0.184-Cross-Site-Scripting.html
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/156582/Joplin-Desktop-1.0.184-Cross-Site-Scripting.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-9038
reference_id
reference_type
scores
0
value 0.01362
scoring_system epss
scoring_elements 0.80588
published_at 2026-06-11T12:55:00Z
1
value 0.01362
scoring_system epss
scoring_elements 0.80652
published_at 2026-06-14T12:55:00Z
2
value 0.01362
scoring_system epss
scoring_elements 0.80661
published_at 2026-06-13T12:55:00Z
3
value 0.01362
scoring_system epss
scoring_elements 0.80649
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-9038
2
reference_url https://github.com/laurent22/joplin/commit/3db47b575b9cb0a765da3d283baa2c065df0d0bc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laurent22/joplin/commit/3db47b575b9cb0a765da3d283baa2c065df0d0bc
3
reference_url https://github.com/laurent22/joplin/compare/clipper-1.0.19...clipper-1.0.20
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laurent22/joplin/compare/clipper-1.0.19...clipper-1.0.20
4
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/48147.txt
reference_id CVE-2020-9038
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/48147.txt
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-9038
reference_id CVE-2020-9038
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-9038
6
reference_url https://github.com/advisories/GHSA-6r7x-hc8m-985r
reference_id GHSA-6r7x-hc8m-985r
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6r7x-hc8m-985r
fixed_packages
0
url pkg:npm/joplin@1.2.1
purl pkg:npm/joplin@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1aj9-yyyw-e7f1
1
vulnerability VCID-3wem-jqp1-mfd6
2
vulnerability VCID-cj22-b24b-tufz
3
vulnerability VCID-kuw3-jv1d-hkgg
4
vulnerability VCID-n9hv-tu62-k7gn
5
vulnerability VCID-p5ps-1twg-hkbs
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/joplin@1.2.1
aliases CVE-2020-9038, GHSA-6r7x-hc8m-985r
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bv9s-n5cc-83ba
3
url VCID-cj22-b24b-tufz
vulnerability_id VCID-cj22-b24b-tufz
summary Joplin vulnerable to Cross-site Scripting in notes
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-37916
reference_id
reference_type
scores
0
value 0.00358
scoring_system epss
scoring_elements 0.58558
published_at 2026-06-12T12:55:00Z
1
value 0.00358
scoring_system epss
scoring_elements 0.58446
published_at 2026-06-11T12:55:00Z
2
value 0.00358
scoring_system epss
scoring_elements 0.58564
published_at 2026-06-14T12:55:00Z
3
value 0.00358
scoring_system epss
scoring_elements 0.58574
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-37916
1
reference_url https://github.com/laurent22/joplin/commit/feaecf765368f2c273bea3a9fa641ff0da7e6b26
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laurent22/joplin/commit/feaecf765368f2c273bea3a9fa641ff0da7e6b26
2
reference_url https://github.com/laurent22/joplin/releases/tag/v2.0.9
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laurent22/joplin/releases/tag/v2.0.9
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37916
reference_id CVE-2021-37916
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-37916
4
reference_url https://github.com/advisories/GHSA-mrmf-755g-w2vw
reference_id GHSA-mrmf-755g-w2vw
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mrmf-755g-w2vw
fixed_packages
0
url pkg:npm/joplin@2.0.9
purl pkg:npm/joplin@2.0.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/joplin@2.0.9
1
url pkg:npm/joplin@2.1.1
purl pkg:npm/joplin@2.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1aj9-yyyw-e7f1
1
vulnerability VCID-kuw3-jv1d-hkgg
2
vulnerability VCID-n9hv-tu62-k7gn
3
vulnerability VCID-p5ps-1twg-hkbs
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/joplin@2.1.1
aliases CVE-2021-37916, GHSA-mrmf-755g-w2vw
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cj22-b24b-tufz
4
url VCID-kuw3-jv1d-hkgg
vulnerability_id VCID-kuw3-jv1d-hkgg
summary Joplin before 2.11.5 allows XSS via a USE element in an SVG document.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-37298
reference_id
reference_type
scores
0
value 0.00352
scoring_system epss
scoring_elements 0.58094
published_at 2026-06-12T12:55:00Z
1
value 0.00352
scoring_system epss
scoring_elements 0.58099
published_at 2026-06-14T12:55:00Z
2
value 0.00352
scoring_system epss
scoring_elements 0.58111
published_at 2026-06-13T12:55:00Z
3
value 0.00352
scoring_system epss
scoring_elements 0.57982
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-37298
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-37298
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-37298
2
reference_url https://vuln.ryotak.net/advisories/69
reference_id 69
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-27T15:29:49Z/
url https://vuln.ryotak.net/advisories/69
3
reference_url https://github.com/laurent22/joplin/commit/caf66068bfc474bbfd505013076ed173cd90ca83
reference_id caf66068bfc474bbfd505013076ed173cd90ca83
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-27T15:29:49Z/
url https://github.com/laurent22/joplin/commit/caf66068bfc474bbfd505013076ed173cd90ca83
4
reference_url https://github.com/advisories/GHSA-7grw-xfx6-qhx6
reference_id GHSA-7grw-xfx6-qhx6
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7grw-xfx6-qhx6
5
reference_url https://github.com/laurent22/joplin/releases/tag/v2.11.5
reference_id v2.11.5
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-27T15:29:49Z/
url https://github.com/laurent22/joplin/releases/tag/v2.11.5
fixed_packages
0
url pkg:npm/joplin@2.11.5
purl pkg:npm/joplin@2.11.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/joplin@2.11.5
aliases CVE-2023-37298, GHSA-7grw-xfx6-qhx6
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kuw3-jv1d-hkgg
5
url VCID-n9hv-tu62-k7gn
vulnerability_id VCID-n9hv-tu62-k7gn
summary Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows attacker to execute arbitrary code via improper santization.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-45598
reference_id
reference_type
scores
0
value 0.005
scoring_system epss
scoring_elements 0.66516
published_at 2026-06-12T12:55:00Z
1
value 0.005
scoring_system epss
scoring_elements 0.66529
published_at 2026-06-14T12:55:00Z
2
value 0.005
scoring_system epss
scoring_elements 0.66531
published_at 2026-06-13T12:55:00Z
3
value 0.005
scoring_system epss
scoring_elements 0.66423
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-45598
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-45598
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-45598
2
reference_url https://github.com/laurent22/joplin/commit/a2de167b95debad83a0f0c7925a88c0198db812e
reference_id a2de167b95debad83a0f0c7925a88c0198db812e
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-27T18:27:23Z/
url https://github.com/laurent22/joplin/commit/a2de167b95debad83a0f0c7925a88c0198db812e
3
reference_url https://github.com/advisories/GHSA-h6c2-879r-jffh
reference_id GHSA-h6c2-879r-jffh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-h6c2-879r-jffh
4
reference_url https://github.com/laurent22/joplin/releases/tag/v2.9.17
reference_id v2.9.17
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-27T18:27:23Z/
url https://github.com/laurent22/joplin/releases/tag/v2.9.17
fixed_packages
0
url pkg:npm/joplin@2.9.17
purl pkg:npm/joplin@2.9.17
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/joplin@2.9.17
aliases CVE-2022-45598, GHSA-h6c2-879r-jffh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n9hv-tu62-k7gn
6
url VCID-p5ps-1twg-hkbs
vulnerability_id VCID-p5ps-1twg-hkbs
summary Joplin before 2.11.5 allows XSS via an AREA element of an image map.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-37299
reference_id
reference_type
scores
0
value 0.00352
scoring_system epss
scoring_elements 0.58111
published_at 2026-06-13T12:55:00Z
1
value 0.00352
scoring_system epss
scoring_elements 0.58099
published_at 2026-06-14T12:55:00Z
2
value 0.00352
scoring_system epss
scoring_elements 0.57982
published_at 2026-06-11T12:55:00Z
3
value 0.00352
scoring_system epss
scoring_elements 0.58094
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-37299
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-37299
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-37299
2
reference_url https://vuln.ryotak.net/advisories/68
reference_id 68
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-27T15:29:00Z/
url https://vuln.ryotak.net/advisories/68
3
reference_url https://github.com/laurent22/joplin/commit/9e90d9016daf79b5414646a93fd369aedb035071
reference_id 9e90d9016daf79b5414646a93fd369aedb035071
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-27T15:29:00Z/
url https://github.com/laurent22/joplin/commit/9e90d9016daf79b5414646a93fd369aedb035071
4
reference_url https://github.com/advisories/GHSA-4jjv-p8x9-rrf7
reference_id GHSA-4jjv-p8x9-rrf7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4jjv-p8x9-rrf7
5
reference_url https://github.com/laurent22/joplin/releases/tag/v2.11.5
reference_id v2.11.5
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-27T15:29:00Z/
url https://github.com/laurent22/joplin/releases/tag/v2.11.5
fixed_packages
0
url pkg:npm/joplin@2.11.5
purl pkg:npm/joplin@2.11.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/joplin@2.11.5
aliases CVE-2023-37299, GHSA-4jjv-p8x9-rrf7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p5ps-1twg-hkbs
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/joplin@1.0.99