Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:gem/bio-basespace-sdk@0
Typegem
Namespace
Namebio-basespace-sdk
Version0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-5c6s-d9cz-s3fq
vulnerability_id VCID-5c6s-d9cz-s3fq
summary 
Command Line API Key Disclosure
This package contains a flaw that is due to the API client code passing the API_KEY to a curl command. This may allow a local attacker to gain access to API key information by monitoring the process table.
references
0
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bio-basespace-sdk/OSVDB-101031.yml
reference_id
reference_type
scores
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bio-basespace-sdk/OSVDB-101031.yml
fixed_packages
aliases CVE-2013-7111
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5c6s-d9cz-s3fq
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:gem/bio-basespace-sdk@0