Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/libcommons-collections3-java@3.1a-3.1
Typedeb
Namespacedebian
Namelibcommons-collections3-java
Version3.1a-3.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.2.2-1
Latest_non_vulnerable_version3.2.2-1
Affected_by_vulnerabilities
0
url VCID-4pcv-4aup-kuee
vulnerability_id VCID-4pcv-4aup-kuee
summary security update
references
fixed_packages
0
url pkg:deb/debian/libcommons-collections3-java@3.2.1-5%2Bdeb7u1
purl pkg:deb/debian/libcommons-collections3-java@3.2.1-5%2Bdeb7u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pcv-4aup-kuee
1
vulnerability VCID-d35k-bj2z-ayg9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcommons-collections3-java@3.2.1-5%252Bdeb7u1
1
url pkg:deb/debian/libcommons-collections3-java@3.2.1-7%2Bdeb8u1
purl pkg:deb/debian/libcommons-collections3-java@3.2.1-7%2Bdeb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d35k-bj2z-ayg9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcommons-collections3-java@3.2.1-7%252Bdeb8u1
aliases DSA-3403-1 libcommons-collections3-java
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4pcv-4aup-kuee
1
url VCID-d35k-bj2z-ayg9
vulnerability_id VCID-d35k-bj2z-ayg9
summary 
InvokerTransformer code execution during deserialization
This package allows code execution when deserializing objects involving a specially constructed chain of classes. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using the commons-collections library.
references
0
reference_url http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/
reference_id
reference_type
scores
url http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/
1
reference_url http://rhn.redhat.com/errata/RHSA-2016-1773.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-1773.html
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7501.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7501.json
3
reference_url https://access.redhat.com/security/vulnerabilities/2059393
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/security/vulnerabilities/2059393
4
reference_url https://access.redhat.com/solutions/2045023
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/solutions/2045023
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-7501
reference_id
reference_type
scores
0
value 0.71461
scoring_system epss
scoring_elements 0.98742
published_at 2026-06-09T12:55:00Z
1
value 0.71461
scoring_system epss
scoring_elements 0.98744
published_at 2026-06-07T12:55:00Z
2
value 0.71461
scoring_system epss
scoring_elements 0.98743
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-7501
6
reference_url https://arxiv.org/pdf/2306.05534.pdf
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://arxiv.org/pdf/2306.05534.pdf
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1279330
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1279330
8
reference_url https://commons.apache.org/proper/commons-collections/release_4_1.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://commons.apache.org/proper/commons-collections/release_4_1.html
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7501
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7501
10
reference_url https://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability
11
reference_url https://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/
reference_id
reference_type
scores
url https://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/
12
reference_url https://github.com/apache/commons-collections
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/commons-collections
13
reference_url https://issues.apache.org/jira/browse/COLLECTIONS-580.
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/COLLECTIONS-580.
14
reference_url https://sourceforge.net/p/collections/code/HEAD/tree
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://sourceforge.net/p/collections/code/HEAD/tree
15
reference_url https://sourceforge.net/p/collections/code/HEAD/tree/
reference_id
reference_type
scores
url https://sourceforge.net/p/collections/code/HEAD/tree/
16
reference_url https://github.com/jensdietrich/xshady-release/tree/main/CVE-2015-7501
reference_id CVE-2015-7501
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/jensdietrich/xshady-release/tree/main/CVE-2015-7501
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-7501
reference_id CVE-2015-7501
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-7501
18
reference_url https://github.com/advisories/GHSA-fjq5-5j5f-mvxh
reference_id GHSA-fjq5-5j5f-mvxh
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-fjq5-5j5f-mvxh
19
reference_url https://access.redhat.com/errata/RHSA-2015:2500
reference_id RHSA-2015:2500
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2500
20
reference_url https://access.redhat.com/errata/RHSA-2015:2501
reference_id RHSA-2015:2501
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2501
21
reference_url https://access.redhat.com/errata/RHSA-2015:2502
reference_id RHSA-2015:2502
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2502
22
reference_url https://access.redhat.com/errata/RHSA-2015:2514
reference_id RHSA-2015:2514
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2514
23
reference_url https://access.redhat.com/errata/RHSA-2015:2516
reference_id RHSA-2015:2516
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2516
24
reference_url https://access.redhat.com/errata/RHSA-2015:2517
reference_id RHSA-2015:2517
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2517
25
reference_url https://access.redhat.com/errata/RHSA-2015:2521
reference_id RHSA-2015:2521
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2521
26
reference_url https://access.redhat.com/errata/RHSA-2015:2522
reference_id RHSA-2015:2522
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2522
27
reference_url https://access.redhat.com/errata/RHSA-2015:2523
reference_id RHSA-2015:2523
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2523
28
reference_url https://access.redhat.com/errata/RHSA-2015:2524
reference_id RHSA-2015:2524
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2524
29
reference_url https://access.redhat.com/errata/RHSA-2015:2534
reference_id RHSA-2015:2534
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2534
30
reference_url https://access.redhat.com/errata/RHSA-2015:2535
reference_id RHSA-2015:2535
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2535
31
reference_url https://access.redhat.com/errata/RHSA-2015:2536
reference_id RHSA-2015:2536
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2536
32
reference_url https://access.redhat.com/errata/RHSA-2015:2537
reference_id RHSA-2015:2537
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2537
33
reference_url https://access.redhat.com/errata/RHSA-2015:2538
reference_id RHSA-2015:2538
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2538
34
reference_url https://access.redhat.com/errata/RHSA-2015:2539
reference_id RHSA-2015:2539
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2539
35
reference_url https://access.redhat.com/errata/RHSA-2015:2540
reference_id RHSA-2015:2540
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2540
36
reference_url https://access.redhat.com/errata/RHSA-2015:2541
reference_id RHSA-2015:2541
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2541
37
reference_url https://access.redhat.com/errata/RHSA-2015:2542
reference_id RHSA-2015:2542
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2542
38
reference_url https://access.redhat.com/errata/RHSA-2015:2547
reference_id RHSA-2015:2547
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2547
39
reference_url https://access.redhat.com/errata/RHSA-2015:2548
reference_id RHSA-2015:2548
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2548
40
reference_url https://access.redhat.com/errata/RHSA-2015:2556
reference_id RHSA-2015:2556
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2556
41
reference_url https://access.redhat.com/errata/RHSA-2015:2557
reference_id RHSA-2015:2557
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2557
42
reference_url https://access.redhat.com/errata/RHSA-2015:2559
reference_id RHSA-2015:2559
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2559
43
reference_url https://access.redhat.com/errata/RHSA-2015:2560
reference_id RHSA-2015:2560
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2560
44
reference_url https://access.redhat.com/errata/RHSA-2015:2578
reference_id RHSA-2015:2578
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2578
45
reference_url https://access.redhat.com/errata/RHSA-2015:2579
reference_id RHSA-2015:2579
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2579
46
reference_url https://access.redhat.com/errata/RHSA-2015:2670
reference_id RHSA-2015:2670
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2670
47
reference_url https://access.redhat.com/errata/RHSA-2015:2671
reference_id RHSA-2015:2671
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2671
48
reference_url https://access.redhat.com/errata/RHSA-2016:0040
reference_id RHSA-2016:0040
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0040
49
reference_url https://access.redhat.com/errata/RHSA-2016:0118
reference_id RHSA-2016:0118
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0118
50
reference_url https://access.redhat.com/errata/RHSA-2016:1773
reference_id RHSA-2016:1773
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1773
51
reference_url https://access.redhat.com/errata/RHSA-2020:4274
reference_id RHSA-2020:4274
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4274
fixed_packages
0
url pkg:deb/debian/libcommons-collections3-java@3.2.2-1
purl pkg:deb/debian/libcommons-collections3-java@3.2.2-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcommons-collections3-java@3.2.2-1
aliases CVE-2015-7501, GHSA-fjq5-5j5f-mvxh
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d35k-bj2z-ayg9
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/libcommons-collections3-java@3.1a-3.1