Lookup for vulnerable packages by Package URL.

Purlpkg:npm/%40keystonejs/keystone@8.1.4
Typenpm
Namespace@keystonejs
Namekeystone
Version8.1.4
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version19.3.3
Latest_non_vulnerable_version19.3.3
Affected_by_vulnerabilities
0
url VCID-gu5q-hvx4-sfhh
vulnerability_id VCID-gu5q-hvx4-sfhh
summary
Information Exposure
Keystone 5 is an open source CMS platform to build Node.js applications. This security advisory relates to a newly discovered capability in our query infrastructure to directly or indirectly expose the values of private fields, bypassing the configured access control.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-32624
reference_id
reference_type
scores
0
value 0.00314
scoring_system epss
scoring_elements 0.54866
published_at 2026-06-09T12:55:00Z
1
value 0.00314
scoring_system epss
scoring_elements 0.54807
published_at 2026-06-04T12:55:00Z
2
value 0.00314
scoring_system epss
scoring_elements 0.54864
published_at 2026-06-05T12:55:00Z
3
value 0.00314
scoring_system epss
scoring_elements 0.54873
published_at 2026-06-06T12:55:00Z
4
value 0.00314
scoring_system epss
scoring_elements 0.54865
published_at 2026-06-07T12:55:00Z
5
value 0.00314
scoring_system epss
scoring_elements 0.54846
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-32624
1
reference_url https://github.com/keystonejs/keystone-5/security/advisories/GHSA-27g8-r9vw-765x
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/keystonejs/keystone-5/security/advisories/GHSA-27g8-r9vw-765x
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-32624
reference_id CVE-2021-32624
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-32624
3
reference_url https://github.com/advisories/GHSA-27g8-r9vw-765x
reference_id GHSA-27g8-r9vw-765x
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-27g8-r9vw-765x
fixed_packages
0
url pkg:npm/%40keystonejs/keystone@19.3.3
purl pkg:npm/%40keystonejs/keystone@19.3.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540keystonejs/keystone@19.3.3
aliases CVE-2021-32624, GHSA-27g8-r9vw-765x
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gu5q-hvx4-sfhh
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/%2540keystonejs/keystone@8.1.4