Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/octavia@0.9.0
Typepypi
Namespace
Nameoctavia
Version0.9.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.1.2
Latest_non_vulnerable_version4.1.0
Affected_by_vulnerabilities
0
url VCID-gfc8-ss31-17f6
vulnerability_id VCID-gfc8-ss31-17f6
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16856.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16856.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16856
reference_id
reference_type
scores
0
value 0.00267
scoring_system epss
scoring_elements 0.50456
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16856
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16856
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16856
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/openstack/octavia
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/openstack/octavia
5
reference_url https://github.com/openstack/octavia/commit/ae7c87f54a6c5483a608d5e9fe51ea1966ea1f7e
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/openstack/octavia/commit/ae7c87f54a6c5483a608d5e9fe51ea1966ea1f7e
6
reference_url https://github.com/openstack/octavia/commits/3.1.0
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/openstack/octavia/commits/3.1.0
7
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/octavia/PYSEC-2019-193.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/octavia/PYSEC-2019-193.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1649165
reference_id 1649165
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1649165
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-16856
reference_id CVE-2018-16856
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-16856
10
reference_url https://github.com/advisories/GHSA-qcj3-h27m-mp9x
reference_id GHSA-qcj3-h27m-mp9x
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qcj3-h27m-mp9x
11
reference_url https://access.redhat.com/errata/RHSA-2019:0567
reference_id RHSA-2019:0567
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:0567
12
reference_url https://access.redhat.com/errata/RHSA-2019:0593
reference_id RHSA-2019:0593
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:0593
fixed_packages
0
url pkg:pypi/octavia@2.0.3
purl pkg:pypi/octavia@2.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9e1z-ubw1-qbcf
1
vulnerability VCID-gfc8-ss31-17f6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/octavia@2.0.3
1
url pkg:pypi/octavia@2.1.0
purl pkg:pypi/octavia@2.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9e1z-ubw1-qbcf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/octavia@2.1.0
2
url pkg:pypi/octavia@3.0.2
purl pkg:pypi/octavia@3.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9e1z-ubw1-qbcf
1
vulnerability VCID-gfc8-ss31-17f6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/octavia@3.0.2
3
url pkg:pypi/octavia@3.1.0
purl pkg:pypi/octavia@3.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9e1z-ubw1-qbcf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/octavia@3.1.0
aliases CVE-2018-16856, GHSA-qcj3-h27m-mp9x, PYSEC-2019-193
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gfc8-ss31-17f6
Fixing_vulnerabilities
0
url VCID-wknc-er6b-fbd5
vulnerability_id VCID-wknc-er6b-fbd5
summary An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if requested to spawn new amphorae, Octavia would then pick up the compromised image.
references
0
reference_url https://access.redhat.com/errata/RHSA-2019:1683
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:1683
1
reference_url https://access.redhat.com/errata/RHSA-2019:1742
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:1742
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3895.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3895.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-3895
reference_id
reference_type
scores
0
value 0.00509
scoring_system epss
scoring_elements 0.66802
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-3895
4
reference_url https://bugs.launchpad.net/octavia/+bug/1620629
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugs.launchpad.net/octavia/+bug/1620629
5
reference_url https://bugs.launchpad.net/tripleo/+bug/1830607
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugs.launchpad.net/tripleo/+bug/1830607
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3895
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3895
7
reference_url https://github.com/advisories/GHSA-jjgh-m322-fjx6
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-jjgh-m322-fjx6
8
reference_url https://github.com/openstack/octavia
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/openstack/octavia
9
reference_url https://github.com/openstack/octavia/blob/08570831754d9671fbd1756d668f55f191e47ca4/octavia/compute/drivers/nova_driver.py#L35
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/openstack/octavia/blob/08570831754d9671fbd1756d668f55f191e47ca4/octavia/compute/drivers/nova_driver.py#L35
10
reference_url https://github.com/openstack/octavia/commit/d7d062a47ab54a540d81f13a0e5f3085ebfaa0d2
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/openstack/octavia/commit/d7d062a47ab54a540d81f13a0e5f3085ebfaa0d2
11
reference_url https://github.com/openstack/tripleo-common/commit/e7c5eab712e0f70ecbc6d225d4766e0fe0f3f884
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/openstack/tripleo-common/commit/e7c5eab712e0f70ecbc6d225d4766e0fe0f3f884
12
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/octavia/PYSEC-2019-194.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/octavia/PYSEC-2019-194.yaml
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-3895
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-3895
14
reference_url https://opendev.org/openstack/octavia/commit/d7d062a47ab54a540d81f13a0e5f3085ebfaa0d2
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://opendev.org/openstack/octavia/commit/d7d062a47ab54a540d81f13a0e5f3085ebfaa0d2
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1694608
reference_id 1694608
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1694608
fixed_packages
0
url pkg:pypi/octavia@0.9.0
purl pkg:pypi/octavia@0.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gfc8-ss31-17f6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/octavia@0.9.0
aliases CVE-2019-3895, GHSA-jjgh-m322-fjx6, PYSEC-2019-194
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wknc-er6b-fbd5
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/octavia@0.9.0