| 0 |
| url |
VCID-1t7f-6es9-k3c8 |
| vulnerability_id |
VCID-1t7f-6es9-k3c8 |
| summary |
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0079 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00194 |
| scoring_system |
epss |
| scoring_elements |
0.41271 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00194 |
| scoring_system |
epss |
| scoring_elements |
0.4121 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00194 |
| scoring_system |
epss |
| scoring_elements |
0.4124 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00194 |
| scoring_system |
epss |
| scoring_elements |
0.4119 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00194 |
| scoring_system |
epss |
| scoring_elements |
0.41267 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0079 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.10.0 |
| purl |
pkg:composer/showdoc/showdoc@2.10.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3j53-nrc9-n7as |
|
| 1 |
| vulnerability |
VCID-3wb2-9q5s-5kb4 |
|
| 2 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 3 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 4 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 5 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 6 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 7 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 8 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 9 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 10 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 11 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 12 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 13 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 14 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 15 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 16 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 17 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 18 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 19 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 20 |
| vulnerability |
VCID-v4rx-u3kd-dubz |
|
| 21 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.0 |
|
|
| aliases |
CVE-2022-0079, GHSA-5mj6-3cmq-fh34
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1t7f-6es9-k3c8 |
|
| 1 |
| url |
VCID-3j53-nrc9-n7as |
| vulnerability_id |
VCID-3j53-nrc9-n7as |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0880 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00304 |
| scoring_system |
epss |
| scoring_elements |
0.53996 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00304 |
| scoring_system |
epss |
| scoring_elements |
0.54008 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00304 |
| scoring_system |
epss |
| scoring_elements |
0.54001 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00304 |
| scoring_system |
epss |
| scoring_elements |
0.53974 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00304 |
| scoring_system |
epss |
| scoring_elements |
0.53944 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0880 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.10.2 |
| purl |
pkg:composer/showdoc/showdoc@2.10.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 1 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 2 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 3 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 4 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 5 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 6 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 7 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 8 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 9 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 10 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 11 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 12 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 13 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 14 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 15 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 16 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 17 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 18 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.2 |
|
| 1 |
|
|
| aliases |
CVE-2022-0880, GHSA-gq77-3r6x-383w
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-3j53-nrc9-n7as |
|
| 2 |
| url |
VCID-3wb2-9q5s-5kb4 |
| vulnerability_id |
VCID-3wb2-9q5s-5kb4 |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-4172 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00195 |
| scoring_system |
epss |
| scoring_elements |
0.41299 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00195 |
| scoring_system |
epss |
| scoring_elements |
0.41238 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00195 |
| scoring_system |
epss |
| scoring_elements |
0.41268 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00195 |
| scoring_system |
epss |
| scoring_elements |
0.41218 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00195 |
| scoring_system |
epss |
| scoring_elements |
0.41295 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-4172 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.10.2 |
| purl |
pkg:composer/showdoc/showdoc@2.10.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 1 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 2 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 3 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 4 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 5 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 6 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 7 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 8 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 9 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 10 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 11 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 12 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 13 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 14 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 15 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 16 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 17 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 18 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.2 |
|
|
| aliases |
CVE-2021-4172, GHSA-7x22-pmw5-66mq
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-3wb2-9q5s-5kb4 |
|
| 3 |
| url |
VCID-4kd3-qaha-3ybn |
| vulnerability_id |
VCID-4kd3-qaha-3ybn |
| summary |
Unrestricted Upload of File with Dangerous Type
There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-1034 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00487 |
| scoring_system |
epss |
| scoring_elements |
0.65862 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00487 |
| scoring_system |
epss |
| scoring_elements |
0.65838 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00487 |
| scoring_system |
epss |
| scoring_elements |
0.65848 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00487 |
| scoring_system |
epss |
| scoring_elements |
0.65797 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00487 |
| scoring_system |
epss |
| scoring_elements |
0.6585 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-1034 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-1034, GHSA-xp82-jmw8-mjxp
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4kd3-qaha-3ybn |
|
| 4 |
| url |
VCID-6jnb-hve3-uqhn |
| vulnerability_id |
VCID-6jnb-hve3-uqhn |
| summary |
showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3993 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00117 |
| scoring_system |
epss |
| scoring_elements |
0.30121 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00117 |
| scoring_system |
epss |
| scoring_elements |
0.3006 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00117 |
| scoring_system |
epss |
| scoring_elements |
0.30089 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00117 |
| scoring_system |
epss |
| scoring_elements |
0.30084 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00117 |
| scoring_system |
epss |
| scoring_elements |
0.30157 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3993 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.9.13 |
| purl |
pkg:composer/showdoc/showdoc@2.9.13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1t7f-6es9-k3c8 |
|
| 1 |
| vulnerability |
VCID-3j53-nrc9-n7as |
|
| 2 |
| vulnerability |
VCID-3wb2-9q5s-5kb4 |
|
| 3 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 4 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 5 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 6 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 7 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 8 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 9 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 10 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 11 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 12 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 13 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 14 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 15 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 16 |
| vulnerability |
VCID-hb5n-utyp-gqe3 |
|
| 17 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 18 |
| vulnerability |
VCID-pgbx-psys-q7cd |
|
| 19 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 20 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 21 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 22 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 23 |
| vulnerability |
VCID-v4rx-u3kd-dubz |
|
| 24 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.13 |
|
|
| aliases |
CVE-2021-3993, GHSA-6pqm-xvfc-w7p4
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6jnb-hve3-uqhn |
|
| 5 |
| url |
VCID-7aas-2br7-ubfb |
| vulnerability_id |
VCID-7aas-2br7-ubfb |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0965 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.59997 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.60009 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.60006 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.5998 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.59959 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0965 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0965, GHSA-v8mp-hhjq-h4cj
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7aas-2br7-ubfb |
|
| 6 |
| url |
VCID-7fcp-yz8r-pbhf |
| vulnerability_id |
VCID-7fcp-yz8r-pbhf |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0942 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00344 |
| scoring_system |
epss |
| scoring_elements |
0.5728 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00344 |
| scoring_system |
epss |
| scoring_elements |
0.57292 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00344 |
| scoring_system |
epss |
| scoring_elements |
0.57284 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00344 |
| scoring_system |
epss |
| scoring_elements |
0.57266 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00344 |
| scoring_system |
epss |
| scoring_elements |
0.57233 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0942 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0942, GHSA-9fcc-7g44-mxrj
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7fcp-yz8r-pbhf |
|
| 7 |
| url |
VCID-8bw3-usja-9yb8 |
| vulnerability_id |
VCID-8bw3-usja-9yb8 |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0966 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00223 |
| scoring_system |
epss |
| scoring_elements |
0.45034 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00223 |
| scoring_system |
epss |
| scoring_elements |
0.45054 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00223 |
| scoring_system |
epss |
| scoring_elements |
0.45049 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00223 |
| scoring_system |
epss |
| scoring_elements |
0.45005 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00223 |
| scoring_system |
epss |
| scoring_elements |
0.44981 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0966 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.4.10 |
| purl |
pkg:composer/showdoc/showdoc@2.4.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1t7f-6es9-k3c8 |
|
| 1 |
| vulnerability |
VCID-3j53-nrc9-n7as |
|
| 2 |
| vulnerability |
VCID-3wb2-9q5s-5kb4 |
|
| 3 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 4 |
| vulnerability |
VCID-6jnb-hve3-uqhn |
|
| 5 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 6 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 7 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 8 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 9 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 10 |
| vulnerability |
VCID-bnan-k8zm-eqah |
|
| 11 |
| vulnerability |
VCID-bpyz-tsky-t7dy |
|
| 12 |
| vulnerability |
VCID-br1f-rp5b-77ce |
|
| 13 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 14 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 15 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 16 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 17 |
| vulnerability |
VCID-getm-5kfz-c3cj |
|
| 18 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 19 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 20 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 21 |
| vulnerability |
VCID-hb5n-utyp-gqe3 |
|
| 22 |
| vulnerability |
VCID-juxe-8cs4-cyfs |
|
| 23 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 24 |
| vulnerability |
VCID-nqnp-wv88-w7be |
|
| 25 |
| vulnerability |
VCID-pgbx-psys-q7cd |
|
| 26 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 27 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 28 |
| vulnerability |
VCID-rsa3-88rf-z7bu |
|
| 29 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 30 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 31 |
| vulnerability |
VCID-tfa3-qmfq-hkfj |
|
| 32 |
| vulnerability |
VCID-v4rx-u3kd-dubz |
|
| 33 |
| vulnerability |
VCID-wmj7-1w37-43dm |
|
| 34 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.4.10 |
|
| 1 |
|
|
| aliases |
CVE-2022-0966, GHSA-g585-j55v-38h7
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8bw3-usja-9yb8 |
|
| 8 |
| url |
VCID-a3zn-fqvn-w3ff |
| vulnerability_id |
VCID-a3zn-fqvn-w3ff |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0941 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00196 |
| scoring_system |
epss |
| scoring_elements |
0.41394 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00196 |
| scoring_system |
epss |
| scoring_elements |
0.41424 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00196 |
| scoring_system |
epss |
| scoring_elements |
0.4142 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00196 |
| scoring_system |
epss |
| scoring_elements |
0.41363 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00196 |
| scoring_system |
epss |
| scoring_elements |
0.41344 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0941 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0941, GHSA-wg4r-q74r-p7c8
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-a3zn-fqvn-w3ff |
|
| 9 |
| url |
VCID-agx5-jjj7-gyfr |
| vulnerability_id |
VCID-agx5-jjj7-gyfr |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0960 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00388 |
| scoring_system |
epss |
| scoring_elements |
0.60249 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00388 |
| scoring_system |
epss |
| scoring_elements |
0.60219 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00388 |
| scoring_system |
epss |
| scoring_elements |
0.60236 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00388 |
| scoring_system |
epss |
| scoring_elements |
0.602 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00388 |
| scoring_system |
epss |
| scoring_elements |
0.60247 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0960 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0960, GHSA-rphc-h572-2x9f
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-agx5-jjj7-gyfr |
|
| 10 |
| url |
VCID-av22-2r6d-kydb |
| vulnerability_id |
VCID-av22-2r6d-kydb |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0946 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00322 |
| scoring_system |
epss |
| scoring_elements |
0.556 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00322 |
| scoring_system |
epss |
| scoring_elements |
0.55613 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00322 |
| scoring_system |
epss |
| scoring_elements |
0.55607 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00322 |
| scoring_system |
epss |
| scoring_elements |
0.55581 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00322 |
| scoring_system |
epss |
| scoring_elements |
0.55551 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0946 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0946, GHSA-qq74-vgcf-54c3
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-av22-2r6d-kydb |
|
| 11 |
| url |
VCID-bnan-k8zm-eqah |
| vulnerability_id |
VCID-bnan-k8zm-eqah |
| summary |
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3678 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60506 |
| published_at |
2026-06-08T12:55:00Z |
|
| 1 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60484 |
| published_at |
2026-06-04T12:55:00Z |
|
| 2 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60532 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60535 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60523 |
| published_at |
2026-06-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3678 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.9.8 |
| purl |
pkg:composer/showdoc/showdoc@2.9.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1t7f-6es9-k3c8 |
|
| 1 |
| vulnerability |
VCID-3j53-nrc9-n7as |
|
| 2 |
| vulnerability |
VCID-3wb2-9q5s-5kb4 |
|
| 3 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 4 |
| vulnerability |
VCID-6jnb-hve3-uqhn |
|
| 5 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 6 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 7 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 8 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 9 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 10 |
| vulnerability |
VCID-bpyz-tsky-t7dy |
|
| 11 |
| vulnerability |
VCID-br1f-rp5b-77ce |
|
| 12 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 13 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 14 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 15 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 16 |
| vulnerability |
VCID-getm-5kfz-c3cj |
|
| 17 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 18 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 19 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 20 |
| vulnerability |
VCID-hb5n-utyp-gqe3 |
|
| 21 |
| vulnerability |
VCID-juxe-8cs4-cyfs |
|
| 22 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 23 |
| vulnerability |
VCID-nqnp-wv88-w7be |
|
| 24 |
| vulnerability |
VCID-pgbx-psys-q7cd |
|
| 25 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 26 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 27 |
| vulnerability |
VCID-rsa3-88rf-z7bu |
|
| 28 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 29 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 30 |
| vulnerability |
VCID-v4rx-u3kd-dubz |
|
| 31 |
| vulnerability |
VCID-wmj7-1w37-43dm |
|
| 32 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.8 |
|
|
| aliases |
CVE-2021-3678, GHSA-j85q-whc9-g4p9
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-bnan-k8zm-eqah |
|
| 12 |
| url |
VCID-bpyz-tsky-t7dy |
| vulnerability_id |
VCID-bpyz-tsky-t7dy |
| summary |
URL Redirection to Untrusted Site ('Open Redirect')
showdoc is vulnerable to URL Redirection to Untrusted Site |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3989 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43151 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43095 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.4313 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.4307 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43143 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3989 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.9.13 |
| purl |
pkg:composer/showdoc/showdoc@2.9.13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1t7f-6es9-k3c8 |
|
| 1 |
| vulnerability |
VCID-3j53-nrc9-n7as |
|
| 2 |
| vulnerability |
VCID-3wb2-9q5s-5kb4 |
|
| 3 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 4 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 5 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 6 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 7 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 8 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 9 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 10 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 11 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 12 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 13 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 14 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 15 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 16 |
| vulnerability |
VCID-hb5n-utyp-gqe3 |
|
| 17 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 18 |
| vulnerability |
VCID-pgbx-psys-q7cd |
|
| 19 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 20 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 21 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 22 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 23 |
| vulnerability |
VCID-v4rx-u3kd-dubz |
|
| 24 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.13 |
|
|
| aliases |
CVE-2021-3989, GHSA-f545-vpwp-r9j7
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-bpyz-tsky-t7dy |
|
| 13 |
| url |
VCID-br1f-rp5b-77ce |
| vulnerability_id |
VCID-br1f-rp5b-77ce |
| summary |
Inadequate Encryption Strength
showdoc is vulnerable to Missing Cryptographic Step |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3680 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00099 |
| scoring_system |
epss |
| scoring_elements |
0.27191 |
| published_at |
2026-06-05T12:55:00Z |
|
| 1 |
| value |
0.00099 |
| scoring_system |
epss |
| scoring_elements |
0.27048 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00099 |
| scoring_system |
epss |
| scoring_elements |
0.27097 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00099 |
| scoring_system |
epss |
| scoring_elements |
0.27126 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00099 |
| scoring_system |
epss |
| scoring_elements |
0.27137 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3680 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.9.8 |
| purl |
pkg:composer/showdoc/showdoc@2.9.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1t7f-6es9-k3c8 |
|
| 1 |
| vulnerability |
VCID-3j53-nrc9-n7as |
|
| 2 |
| vulnerability |
VCID-3wb2-9q5s-5kb4 |
|
| 3 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 4 |
| vulnerability |
VCID-6jnb-hve3-uqhn |
|
| 5 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 6 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 7 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 8 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 9 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 10 |
| vulnerability |
VCID-bpyz-tsky-t7dy |
|
| 11 |
| vulnerability |
VCID-br1f-rp5b-77ce |
|
| 12 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 13 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 14 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 15 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 16 |
| vulnerability |
VCID-getm-5kfz-c3cj |
|
| 17 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 18 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 19 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 20 |
| vulnerability |
VCID-hb5n-utyp-gqe3 |
|
| 21 |
| vulnerability |
VCID-juxe-8cs4-cyfs |
|
| 22 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 23 |
| vulnerability |
VCID-nqnp-wv88-w7be |
|
| 24 |
| vulnerability |
VCID-pgbx-psys-q7cd |
|
| 25 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 26 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 27 |
| vulnerability |
VCID-rsa3-88rf-z7bu |
|
| 28 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 29 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 30 |
| vulnerability |
VCID-v4rx-u3kd-dubz |
|
| 31 |
| vulnerability |
VCID-wmj7-1w37-43dm |
|
| 32 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.8 |
|
|
| aliases |
CVE-2021-3680, GHSA-8vh3-29mr-m9xg
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-br1f-rp5b-77ce |
|
| 14 |
| url |
VCID-chek-rsju-gqfd |
| vulnerability_id |
VCID-chek-rsju-gqfd |
| summary |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
A SQL injection vulnerability was found in showdoc. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0362 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00274 |
| scoring_system |
epss |
| scoring_elements |
0.51068 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00274 |
| scoring_system |
epss |
| scoring_elements |
0.51016 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00274 |
| scoring_system |
epss |
| scoring_elements |
0.51046 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00274 |
| scoring_system |
epss |
| scoring_elements |
0.51001 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00274 |
| scoring_system |
epss |
| scoring_elements |
0.51063 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0362 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.10.3 |
| purl |
pkg:composer/showdoc/showdoc@2.10.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3j53-nrc9-n7as |
|
| 1 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 2 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 3 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 4 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 5 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 6 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 7 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 8 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 9 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 10 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 11 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 12 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 13 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 14 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 15 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 16 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 17 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 18 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.3 |
|
|
| aliases |
CVE-2022-0362, GHSA-9cq5-xgg4-x477
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-chek-rsju-gqfd |
|
| 15 |
| url |
VCID-dghy-4cfc-7kc9 |
| vulnerability_id |
VCID-dghy-4cfc-7kc9 |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0957 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00305 |
| scoring_system |
epss |
| scoring_elements |
0.54118 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00305 |
| scoring_system |
epss |
| scoring_elements |
0.54129 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00305 |
| scoring_system |
epss |
| scoring_elements |
0.54121 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00305 |
| scoring_system |
epss |
| scoring_elements |
0.54095 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00305 |
| scoring_system |
epss |
| scoring_elements |
0.54064 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0957 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0957, GHSA-q73m-3q7r-fpf7
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dghy-4cfc-7kc9 |
|
| 16 |
| url |
VCID-dknr-fwjh-g7bw |
| vulnerability_id |
VCID-dknr-fwjh-g7bw |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0945 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0035 |
| scoring_system |
epss |
| scoring_elements |
0.57794 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.0035 |
| scoring_system |
epss |
| scoring_elements |
0.57804 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.0035 |
| scoring_system |
epss |
| scoring_elements |
0.57796 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.0035 |
| scoring_system |
epss |
| scoring_elements |
0.5778 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.0035 |
| scoring_system |
epss |
| scoring_elements |
0.57744 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0945 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0945, GHSA-vpwq-6cp4-ffqc
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dknr-fwjh-g7bw |
|
| 17 |
| url |
VCID-e6cf-bz5b-5fdv |
| vulnerability_id |
VCID-e6cf-bz5b-5fdv |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0938 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43093 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43114 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43105 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43057 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43032 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0938 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0938, GHSA-mw75-qvfr-hpmr
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-e6cf-bz5b-5fdv |
|
| 18 |
| url |
VCID-getm-5kfz-c3cj |
| vulnerability_id |
VCID-getm-5kfz-c3cj |
| summary |
showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3776 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29173 |
| published_at |
2026-06-08T12:55:00Z |
|
| 1 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29206 |
| published_at |
2026-06-07T12:55:00Z |
|
| 2 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29205 |
| published_at |
2026-06-04T12:55:00Z |
|
| 3 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29242 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29275 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3776 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.9.13 |
| purl |
pkg:composer/showdoc/showdoc@2.9.13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1t7f-6es9-k3c8 |
|
| 1 |
| vulnerability |
VCID-3j53-nrc9-n7as |
|
| 2 |
| vulnerability |
VCID-3wb2-9q5s-5kb4 |
|
| 3 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 4 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 5 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 6 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 7 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 8 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 9 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 10 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 11 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 12 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 13 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 14 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 15 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 16 |
| vulnerability |
VCID-hb5n-utyp-gqe3 |
|
| 17 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 18 |
| vulnerability |
VCID-pgbx-psys-q7cd |
|
| 19 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 20 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 21 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 22 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 23 |
| vulnerability |
VCID-v4rx-u3kd-dubz |
|
| 24 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.13 |
|
|
| aliases |
CVE-2021-3776, GHSA-m4hj-wg2r-qpcr
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-getm-5kfz-c3cj |
|
| 19 |
| url |
VCID-gsj9-k61j-1bbs |
| vulnerability_id |
VCID-gsj9-k61j-1bbs |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0937 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00181 |
| scoring_system |
epss |
| scoring_elements |
0.39594 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00181 |
| scoring_system |
epss |
| scoring_elements |
0.39622 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00181 |
| scoring_system |
epss |
| scoring_elements |
0.39618 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00181 |
| scoring_system |
epss |
| scoring_elements |
0.39566 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00181 |
| scoring_system |
epss |
| scoring_elements |
0.39532 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0937 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0937, GHSA-mg5h-9rhq-4cqx
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-gsj9-k61j-1bbs |
|
| 20 |
| url |
VCID-gt4a-2hs9-a7dz |
| vulnerability_id |
VCID-gt4a-2hs9-a7dz |
| summary |
ShowDoc has an Injection vulnerability
A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a manipulation of the argument pages can lead to sql injection. The attack may be launched remotely. Upgrading to version 3.8.1 addresses this issue. It is suggested to upgrade the affected component. According to the researcher, "[t]he vendor explicitly stated they will not backport patches to the older affected versions." |
| references |
| 0 |
|
| 1 |
| reference_url |
https://gist.github.com/saDL0w/555e19668264f98d96259ad47ea33811 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv2 |
| scoring_elements |
AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C |
|
| 1 |
| value |
6.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C |
|
| 2 |
| value |
6.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C |
|
| 3 |
| value |
6.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 4 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N |
|
| 5 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X |
|
| 6 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 7 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T13:18:53Z/ |
|
|
| url |
https://gist.github.com/saDL0w/555e19668264f98d96259ad47ea33811 |
|
| 2 |
| reference_url |
https://github.com/star7th/showdoc |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/star7th/showdoc |
|
| 3 |
| reference_url |
https://github.com/star7th/showdoc/releases/tag/v3.8.1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv2 |
| scoring_elements |
AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C |
|
| 1 |
| value |
6.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C |
|
| 2 |
| value |
6.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C |
|
| 3 |
| value |
6.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 4 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X |
|
| 5 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N |
|
| 6 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 7 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T13:18:53Z/ |
|
|
| url |
https://github.com/star7th/showdoc/releases/tag/v3.8.1 |
|
| 4 |
|
| 5 |
| reference_url |
https://vuldb.com/submit/795528 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv2 |
| scoring_elements |
AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C |
|
| 1 |
| value |
6.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C |
|
| 2 |
| value |
6.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C |
|
| 3 |
| value |
6.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 4 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N |
|
| 5 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X |
|
| 6 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 7 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T13:18:53Z/ |
|
|
| url |
https://vuldb.com/submit/795528 |
|
| 6 |
| reference_url |
https://vuldb.com/vuln/359525 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv2 |
| scoring_elements |
AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C |
|
| 1 |
| value |
6.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C |
|
| 2 |
| value |
6.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 3 |
| value |
6.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C |
|
| 4 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N |
|
| 5 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X |
|
| 6 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 7 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T13:18:53Z/ |
|
|
| url |
https://vuldb.com/vuln/359525 |
|
| 7 |
| reference_url |
https://vuldb.com/vuln/359525/cti |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv2 |
| scoring_elements |
AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C |
|
| 1 |
| value |
6.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C |
|
| 2 |
| value |
6.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C |
|
| 3 |
| value |
6.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
|
| 4 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X |
|
| 5 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N |
|
| 6 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 7 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T13:18:53Z/ |
|
|
| url |
https://vuldb.com/vuln/359525/cti |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2026-6982, GHSA-fm5r-cj7v-rj2c
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-gt4a-2hs9-a7dz |
|
| 21 |
| url |
VCID-h89u-59pk-2fgu |
| vulnerability_id |
VCID-h89u-59pk-2fgu |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0940 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00191 |
| scoring_system |
epss |
| scoring_elements |
0.40912 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00191 |
| scoring_system |
epss |
| scoring_elements |
0.40943 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00191 |
| scoring_system |
epss |
| scoring_elements |
0.40938 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00191 |
| scoring_system |
epss |
| scoring_elements |
0.40881 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00191 |
| scoring_system |
epss |
| scoring_elements |
0.40861 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0940 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0940, GHSA-82j4-vr25-x394
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-h89u-59pk-2fgu |
|
| 22 |
| url |
VCID-hb5n-utyp-gqe3 |
| vulnerability_id |
VCID-hb5n-utyp-gqe3 |
| summary |
URL Redirection to Untrusted Site ('Open Redirect')
showdoc is vulnerable to URL Redirection to Untrusted Site |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-4000 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00196 |
| scoring_system |
epss |
| scoring_elements |
0.41458 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00196 |
| scoring_system |
epss |
| scoring_elements |
0.41398 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00196 |
| scoring_system |
epss |
| scoring_elements |
0.41429 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00196 |
| scoring_system |
epss |
| scoring_elements |
0.41379 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00196 |
| scoring_system |
epss |
| scoring_elements |
0.41454 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-4000 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-4000, GHSA-8c9x-wfgj-v78w
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-hb5n-utyp-gqe3 |
|
| 23 |
| url |
VCID-juxe-8cs4-cyfs |
| vulnerability_id |
VCID-juxe-8cs4-cyfs |
| summary |
showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3775 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29242 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29173 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29206 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29205 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29275 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3775 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-3775, GHSA-pjjf-hc4q-g298
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-juxe-8cs4-cyfs |
|
| 24 |
| url |
VCID-mj16-49bu-1fhs |
| vulnerability_id |
VCID-mj16-49bu-1fhs |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0964 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.59997 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.60009 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.60006 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.5998 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.59959 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0964 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0964, GHSA-xm3x-787m-p66r
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mj16-49bu-1fhs |
|
| 25 |
| url |
VCID-nqnp-wv88-w7be |
| vulnerability_id |
VCID-nqnp-wv88-w7be |
| summary |
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3990 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00301 |
| scoring_system |
epss |
| scoring_elements |
0.53801 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00301 |
| scoring_system |
epss |
| scoring_elements |
0.53765 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00301 |
| scoring_system |
epss |
| scoring_elements |
0.53789 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00301 |
| scoring_system |
epss |
| scoring_elements |
0.53734 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00301 |
| scoring_system |
epss |
| scoring_elements |
0.53792 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3990 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.9.13 |
| purl |
pkg:composer/showdoc/showdoc@2.9.13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1t7f-6es9-k3c8 |
|
| 1 |
| vulnerability |
VCID-3j53-nrc9-n7as |
|
| 2 |
| vulnerability |
VCID-3wb2-9q5s-5kb4 |
|
| 3 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 4 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 5 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 6 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 7 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 8 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 9 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 10 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 11 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 12 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 13 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 14 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 15 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 16 |
| vulnerability |
VCID-hb5n-utyp-gqe3 |
|
| 17 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 18 |
| vulnerability |
VCID-pgbx-psys-q7cd |
|
| 19 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 20 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 21 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 22 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 23 |
| vulnerability |
VCID-v4rx-u3kd-dubz |
|
| 24 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.13 |
|
|
| aliases |
CVE-2021-3990, GHSA-vrgh-5w3c-ggf8
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nqnp-wv88-w7be |
|
| 26 |
| url |
VCID-pgbx-psys-q7cd |
| vulnerability_id |
VCID-pgbx-psys-q7cd |
| summary |
showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-4168 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00105 |
| scoring_system |
epss |
| scoring_elements |
0.28029 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00105 |
| scoring_system |
epss |
| scoring_elements |
0.27949 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00105 |
| scoring_system |
epss |
| scoring_elements |
0.27992 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00105 |
| scoring_system |
epss |
| scoring_elements |
0.2801 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00105 |
| scoring_system |
epss |
| scoring_elements |
0.2808 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-4168 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.9.15 |
| purl |
pkg:composer/showdoc/showdoc@2.9.15 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1t7f-6es9-k3c8 |
|
| 1 |
| vulnerability |
VCID-3j53-nrc9-n7as |
|
| 2 |
| vulnerability |
VCID-3wb2-9q5s-5kb4 |
|
| 3 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 4 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 5 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 6 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 7 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 8 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 9 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 10 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 11 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 12 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 13 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 14 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 15 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 16 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 17 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 18 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 19 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 20 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 21 |
| vulnerability |
VCID-v4rx-u3kd-dubz |
|
| 22 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.15 |
|
|
| aliases |
CVE-2021-4168, GHSA-7vxc-chqj-h83g
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-pgbx-psys-q7cd |
|
| 27 |
| url |
VCID-ppnh-m1gf-cyfb |
| vulnerability_id |
VCID-ppnh-m1gf-cyfb |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0956 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00337 |
| scoring_system |
epss |
| scoring_elements |
0.56854 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00337 |
| scoring_system |
epss |
| scoring_elements |
0.56866 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00337 |
| scoring_system |
epss |
| scoring_elements |
0.56858 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00337 |
| scoring_system |
epss |
| scoring_elements |
0.56839 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00337 |
| scoring_system |
epss |
| scoring_elements |
0.56807 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0956 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0956, GHSA-wg8p-w946-c482
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ppnh-m1gf-cyfb |
|
| 28 |
| url |
VCID-qwju-19hh-jqbm |
| vulnerability_id |
VCID-qwju-19hh-jqbm |
| summary |
Stored Cross-site Scripting in showdoc
Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0967 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00831 |
| scoring_system |
epss |
| scoring_elements |
0.74965 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00831 |
| scoring_system |
epss |
| scoring_elements |
0.74942 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00831 |
| scoring_system |
epss |
| scoring_elements |
0.74958 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00831 |
| scoring_system |
epss |
| scoring_elements |
0.74934 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00831 |
| scoring_system |
epss |
| scoring_elements |
0.74961 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0967 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0967, GHSA-3pg8-c473-w6rr
|
| risk_score |
10.0 |
| exploitability |
2.0 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qwju-19hh-jqbm |
|
| 29 |
| url |
VCID-rsa3-88rf-z7bu |
| vulnerability_id |
VCID-rsa3-88rf-z7bu |
| summary |
showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-4017 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00142 |
| scoring_system |
epss |
| scoring_elements |
0.34135 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00142 |
| scoring_system |
epss |
| scoring_elements |
0.34068 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00142 |
| scoring_system |
epss |
| scoring_elements |
0.34102 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00142 |
| scoring_system |
epss |
| scoring_elements |
0.34019 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00142 |
| scoring_system |
epss |
| scoring_elements |
0.3412 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-4017 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.9.13 |
| purl |
pkg:composer/showdoc/showdoc@2.9.13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1t7f-6es9-k3c8 |
|
| 1 |
| vulnerability |
VCID-3j53-nrc9-n7as |
|
| 2 |
| vulnerability |
VCID-3wb2-9q5s-5kb4 |
|
| 3 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 4 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 5 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 6 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 7 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 8 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 9 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 10 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 11 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 12 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 13 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 14 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 15 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 16 |
| vulnerability |
VCID-hb5n-utyp-gqe3 |
|
| 17 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 18 |
| vulnerability |
VCID-pgbx-psys-q7cd |
|
| 19 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 20 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 21 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 22 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 23 |
| vulnerability |
VCID-v4rx-u3kd-dubz |
|
| 24 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.13 |
|
|
| aliases |
CVE-2021-4017, GHSA-f77h-m9w2-vvg2
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-rsa3-88rf-z7bu |
|
| 30 |
| url |
VCID-t22b-135p-yyeb |
| vulnerability_id |
VCID-t22b-135p-yyeb |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0951 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00343 |
| scoring_system |
epss |
| scoring_elements |
0.57218 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00343 |
| scoring_system |
epss |
| scoring_elements |
0.57231 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00343 |
| scoring_system |
epss |
| scoring_elements |
0.57223 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00343 |
| scoring_system |
epss |
| scoring_elements |
0.57205 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00343 |
| scoring_system |
epss |
| scoring_elements |
0.57172 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0951 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0951, GHSA-j6jg-w79c-7p8v
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-t22b-135p-yyeb |
|
| 31 |
| url |
VCID-t3xf-e2fb-63dk |
| vulnerability_id |
VCID-t3xf-e2fb-63dk |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0962 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.5998 |
| published_at |
2026-06-08T12:55:00Z |
|
| 1 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.59959 |
| published_at |
2026-06-04T12:55:00Z |
|
| 2 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.60006 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.60009 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00384 |
| scoring_system |
epss |
| scoring_elements |
0.59997 |
| published_at |
2026-06-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0962 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0962, GHSA-pccm-j6vj-jwwf
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-t3xf-e2fb-63dk |
|
| 32 |
| url |
VCID-tfa3-qmfq-hkfj |
| vulnerability_id |
VCID-tfa3-qmfq-hkfj |
| summary |
ShowDoc unrestricted file upload vulnerability
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution. This issue affects ShowDoc: before 2.8.7. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0520 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0203 |
| scoring_system |
epss |
| scoring_elements |
0.84137 |
| published_at |
2026-06-05T12:55:00Z |
|
| 1 |
| value |
0.0203 |
| scoring_system |
epss |
| scoring_elements |
0.8414 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.02548 |
| scoring_system |
epss |
| scoring_elements |
0.85777 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.02548 |
| scoring_system |
epss |
| scoring_elements |
0.85762 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0520 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.8.7 |
| purl |
pkg:composer/showdoc/showdoc@2.8.7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1t7f-6es9-k3c8 |
|
| 1 |
| vulnerability |
VCID-3j53-nrc9-n7as |
|
| 2 |
| vulnerability |
VCID-3wb2-9q5s-5kb4 |
|
| 3 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 4 |
| vulnerability |
VCID-6jnb-hve3-uqhn |
|
| 5 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 6 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 7 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 8 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 9 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 10 |
| vulnerability |
VCID-bnan-k8zm-eqah |
|
| 11 |
| vulnerability |
VCID-bpyz-tsky-t7dy |
|
| 12 |
| vulnerability |
VCID-br1f-rp5b-77ce |
|
| 13 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 14 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 15 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 16 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 17 |
| vulnerability |
VCID-getm-5kfz-c3cj |
|
| 18 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 19 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 20 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 21 |
| vulnerability |
VCID-hb5n-utyp-gqe3 |
|
| 22 |
| vulnerability |
VCID-juxe-8cs4-cyfs |
|
| 23 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 24 |
| vulnerability |
VCID-nqnp-wv88-w7be |
|
| 25 |
| vulnerability |
VCID-pgbx-psys-q7cd |
|
| 26 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 27 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 28 |
| vulnerability |
VCID-rsa3-88rf-z7bu |
|
| 29 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 30 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 31 |
| vulnerability |
VCID-v4rx-u3kd-dubz |
|
| 32 |
| vulnerability |
VCID-wmj7-1w37-43dm |
|
| 33 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.8.7 |
|
|
| aliases |
CVE-2025-0520, GHSA-6jmr-r7p6-f5wr
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tfa3-qmfq-hkfj |
|
| 33 |
| url |
VCID-v4rx-u3kd-dubz |
| vulnerability_id |
VCID-v4rx-u3kd-dubz |
| summary |
Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0409 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00209 |
| scoring_system |
epss |
| scoring_elements |
0.4337 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00209 |
| scoring_system |
epss |
| scoring_elements |
0.43311 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00209 |
| scoring_system |
epss |
| scoring_elements |
0.43346 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00209 |
| scoring_system |
epss |
| scoring_elements |
0.43287 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00209 |
| scoring_system |
epss |
| scoring_elements |
0.4336 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0409 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.10.2 |
| purl |
pkg:composer/showdoc/showdoc@2.10.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 1 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 2 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 3 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 4 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 5 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 6 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 7 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 8 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 9 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 10 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 11 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 12 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 13 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 14 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 15 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 16 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 17 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 18 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.2 |
|
|
| aliases |
CVE-2022-0409, GHSA-6x3j-x9rp-whxp
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-v4rx-u3kd-dubz |
|
| 34 |
| url |
VCID-wmj7-1w37-43dm |
| vulnerability_id |
VCID-wmj7-1w37-43dm |
| summary |
showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3683 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29242 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29173 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29206 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29205 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00112 |
| scoring_system |
epss |
| scoring_elements |
0.29275 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-3683 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-3683, GHSA-x5jp-9fmm-m9pf
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wmj7-1w37-43dm |
|
| 35 |
| url |
VCID-yr99-pat7-ekg5 |
| vulnerability_id |
VCID-yr99-pat7-ekg5 |
| summary |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0950 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00281 |
| scoring_system |
epss |
| scoring_elements |
0.51797 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00281 |
| scoring_system |
epss |
| scoring_elements |
0.51819 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00281 |
| scoring_system |
epss |
| scoring_elements |
0.51809 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00281 |
| scoring_system |
epss |
| scoring_elements |
0.51766 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00281 |
| scoring_system |
epss |
| scoring_elements |
0.5175 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-0950 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-0950, GHSA-v94v-pxqp-5qgj
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yr99-pat7-ekg5 |
|
| 36 |
| url |
VCID-ysy2-h2q2-4udy |
| vulnerability_id |
VCID-ysy2-h2q2-4udy |
| summary |
Showdoc Unauthenticated Access
ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified `page_id`. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2018-19620 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32265 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32239 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32269 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32306 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32337 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2018-19620 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:composer/showdoc/showdoc@2.4.2 |
| purl |
pkg:composer/showdoc/showdoc@2.4.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1t7f-6es9-k3c8 |
|
| 1 |
| vulnerability |
VCID-3j53-nrc9-n7as |
|
| 2 |
| vulnerability |
VCID-3wb2-9q5s-5kb4 |
|
| 3 |
| vulnerability |
VCID-4kd3-qaha-3ybn |
|
| 4 |
| vulnerability |
VCID-6jnb-hve3-uqhn |
|
| 5 |
| vulnerability |
VCID-7aas-2br7-ubfb |
|
| 6 |
| vulnerability |
VCID-7fcp-yz8r-pbhf |
|
| 7 |
| vulnerability |
VCID-8bw3-usja-9yb8 |
|
| 8 |
| vulnerability |
VCID-a3zn-fqvn-w3ff |
|
| 9 |
| vulnerability |
VCID-agx5-jjj7-gyfr |
|
| 10 |
| vulnerability |
VCID-av22-2r6d-kydb |
|
| 11 |
| vulnerability |
VCID-bnan-k8zm-eqah |
|
| 12 |
| vulnerability |
VCID-bpyz-tsky-t7dy |
|
| 13 |
| vulnerability |
VCID-br1f-rp5b-77ce |
|
| 14 |
| vulnerability |
VCID-cg8f-kwg3-3ufj |
|
| 15 |
| vulnerability |
VCID-chek-rsju-gqfd |
|
| 16 |
| vulnerability |
VCID-dghy-4cfc-7kc9 |
|
| 17 |
| vulnerability |
VCID-dknr-fwjh-g7bw |
|
| 18 |
| vulnerability |
VCID-e6cf-bz5b-5fdv |
|
| 19 |
| vulnerability |
VCID-getm-5kfz-c3cj |
|
| 20 |
| vulnerability |
VCID-gsj9-k61j-1bbs |
|
| 21 |
| vulnerability |
VCID-gt4a-2hs9-a7dz |
|
| 22 |
| vulnerability |
VCID-h89u-59pk-2fgu |
|
| 23 |
| vulnerability |
VCID-hb5n-utyp-gqe3 |
|
| 24 |
| vulnerability |
VCID-juxe-8cs4-cyfs |
|
| 25 |
| vulnerability |
VCID-mj16-49bu-1fhs |
|
| 26 |
| vulnerability |
VCID-nqnp-wv88-w7be |
|
| 27 |
| vulnerability |
VCID-pgbx-psys-q7cd |
|
| 28 |
| vulnerability |
VCID-ppnh-m1gf-cyfb |
|
| 29 |
| vulnerability |
VCID-qwju-19hh-jqbm |
|
| 30 |
| vulnerability |
VCID-rsa3-88rf-z7bu |
|
| 31 |
| vulnerability |
VCID-t22b-135p-yyeb |
|
| 32 |
| vulnerability |
VCID-t3xf-e2fb-63dk |
|
| 33 |
| vulnerability |
VCID-tfa3-qmfq-hkfj |
|
| 34 |
| vulnerability |
VCID-v4rx-u3kd-dubz |
|
| 35 |
| vulnerability |
VCID-wmj7-1w37-43dm |
|
| 36 |
| vulnerability |
VCID-yr99-pat7-ekg5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.4.2 |
|
|
| aliases |
CVE-2018-19620, GHSA-pfrc-5hhq-6hvr
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ysy2-h2q2-4udy |
|