Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/uppy@1.20.2
Typenpm
Namespace
Nameuppy
Version1.20.2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.3.1
Latest_non_vulnerable_version3.3.1
Affected_by_vulnerabilities
0
url VCID-d1rx-mpux-wubk
vulnerability_id VCID-d1rx-mpux-wubk
summary Incorrect Authorization in @uppy/companion
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0528
reference_id
reference_type
scores
0
value 0.00277
scoring_system epss
scoring_elements 0.51575
published_at 2026-06-12T12:55:00Z
1
value 0.00277
scoring_system epss
scoring_elements 0.51444
published_at 2026-06-11T12:55:00Z
2
value 0.00277
scoring_system epss
scoring_elements 0.51586
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0528
1
reference_url https://github.com/transloadit/uppy/commit/267c34045a1e62c98406d8c31261c604a11e544a
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/transloadit/uppy/commit/267c34045a1e62c98406d8c31261c604a11e544a
2
reference_url https://huntr.dev/bounties/8b060cc3-2420-468e-8293-b9216620175b
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/8b060cc3-2420-468e-8293-b9216620175b
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0528
reference_id CVE-2022-0528
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0528
4
reference_url https://github.com/advisories/GHSA-q24h-5rq3-63j9
reference_id GHSA-q24h-5rq3-63j9
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q24h-5rq3-63j9
fixed_packages
0
url pkg:npm/uppy@3.3.1
purl pkg:npm/uppy@3.3.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/uppy@3.3.1
aliases CVE-2022-0528, GHSA-q24h-5rq3-63j9
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d1rx-mpux-wubk
1
url VCID-k3vz-xnuk-byh1
vulnerability_id VCID-k3vz-xnuk-byh1
summary uppy's companion module is vulnerable to Server-Side Request Forgery (SSRF)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0086
reference_id
reference_type
scores
0
value 0.00336
scoring_system epss
scoring_elements 0.56944
published_at 2026-06-12T12:55:00Z
1
value 0.00336
scoring_system epss
scoring_elements 0.56823
published_at 2026-06-11T12:55:00Z
2
value 0.00336
scoring_system epss
scoring_elements 0.56958
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0086
1
reference_url https://github.com/transloadit/uppy/commit/fc137e30a2a3102eb191141f280d5de20dacdf8f
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/transloadit/uppy/commit/fc137e30a2a3102eb191141f280d5de20dacdf8f
2
reference_url https://github.com/transloadit/uppy/pull/3403
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/transloadit/uppy/pull/3403
3
reference_url https://github.com/transloadit/uppy/releases/tag/uppy%402.3.3
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/transloadit/uppy/releases/tag/uppy%402.3.3
4
reference_url https://huntr.dev/bounties/c1c03ef6-3f18-4976-a9ad-08c251279122
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/c1c03ef6-3f18-4976-a9ad-08c251279122
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0086
reference_id CVE-2022-0086
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0086
6
reference_url https://github.com/advisories/GHSA-x8rq-rc7x-5fg5
reference_id GHSA-x8rq-rc7x-5fg5
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x8rq-rc7x-5fg5
fixed_packages
0
url pkg:npm/uppy@2.3.3
purl pkg:npm/uppy@2.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d1rx-mpux-wubk
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/uppy@2.3.3
aliases CVE-2022-0086, GHSA-x8rq-rc7x-5fg5
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k3vz-xnuk-byh1
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/uppy@1.20.2