Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/nl.basjes.parse.useragent/yauaa-nifi-processors@7.0.0
Typemaven
Namespacenl.basjes.parse.useragent
Nameyauaa-nifi-processors
Version7.0.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version7.9.0
Latest_non_vulnerable_version7.9.0
Affected_by_vulnerabilities
0
url VCID-jsff-yeez-quf8
vulnerability_id VCID-jsff-yeez-quf8
summary 
Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List
### Impact
Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an ArrayIndexOutOfBoundsException. Applications that do not use this feature are not affected.

### Patches
Upgrade to 7.9.0

### Workarounds
Catch and discard any exceptions from Yauaa.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-23496
reference_id
reference_type
scores
0
value 0.00334
scoring_system epss
scoring_elements 0.5655
published_at 2026-06-04T12:55:00Z
1
value 0.00334
scoring_system epss
scoring_elements 0.56601
published_at 2026-06-09T12:55:00Z
2
value 0.00334
scoring_system epss
scoring_elements 0.56583
published_at 2026-06-08T12:55:00Z
3
value 0.00334
scoring_system epss
scoring_elements 0.56598
published_at 2026-06-07T12:55:00Z
4
value 0.00334
scoring_system epss
scoring_elements 0.56603
published_at 2026-06-05T12:55:00Z
5
value 0.00334
scoring_system epss
scoring_elements 0.56609
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-23496
1
reference_url https://github.com/nielsbasjes/yauaa
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/nielsbasjes/yauaa
2
reference_url https://github.com/nielsbasjes/yauaa/commit/3017a866e2cff0d308f264b66fde4fa79e3beb9e
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:48:05Z/
url https://github.com/nielsbasjes/yauaa/commit/3017a866e2cff0d308f264b66fde4fa79e3beb9e
3
reference_url https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
2
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:48:05Z/
url https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23496
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-23496
5
reference_url https://github.com/advisories/GHSA-c4pm-63cg-9j7h
reference_id GHSA-c4pm-63cg-9j7h
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c4pm-63cg-9j7h
fixed_packages
0
url pkg:maven/nl.basjes.parse.useragent/yauaa-nifi-processors@7.9.0
purl pkg:maven/nl.basjes.parse.useragent/yauaa-nifi-processors@7.9.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/nl.basjes.parse.useragent/yauaa-nifi-processors@7.9.0
aliases CVE-2022-23496, GHSA-c4pm-63cg-9j7h, GMS-2022-8073, GMS-2022-8074, GMS-2022-8075, GMS-2022-8076, GMS-2022-8077, GMS-2022-8078, GMS-2022-8079, GMS-2022-8080, GMS-2022-8081, GMS-2022-8082, GMS-2022-8083, GMS-2022-8084, GMS-2022-8085
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jsff-yeez-quf8
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/nl.basjes.parse.useragent/yauaa-nifi-processors@7.0.0