Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/nnabla@1.0.1
Typepypi
Namespace
Namennabla
Version1.0.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-ap51-ngfg-wkgc
vulnerability_id VCID-ap51-ngfg-wkgc
summary Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10844
reference_id
reference_type
scores
0
value 0.00389
scoring_system epss
scoring_elements 0.60527
published_at 2026-06-12T12:55:00Z
1
value 0.00389
scoring_system epss
scoring_elements 0.60421
published_at 2026-06-11T12:55:00Z
2
value 0.00389
scoring_system epss
scoring_elements 0.60538
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10844
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/nnabla/PYSEC-2019-107.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/nnabla/PYSEC-2019-107.yaml
2
reference_url https://github.com/sony/nnabla
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/sony/nnabla
3
reference_url https://github.com/sony/nnabla/commit/e87347648ab7210529a0e60f0849680de8e9b63a
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/sony/nnabla/commit/e87347648ab7210529a0e60f0849680de8e9b63a
4
reference_url https://github.com/sony/nnabla/issues/209
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/sony/nnabla/issues/209
5
reference_url https://github.com/sony/nnabla/pull/299
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/sony/nnabla/pull/299
6
reference_url https://github.com/sony/nnabla/releases/tag/v1.0.10
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/sony/nnabla/releases/tag/v1.0.10
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-10844
reference_id CVE-2019-10844
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-10844
8
reference_url https://github.com/advisories/GHSA-4q2w-rw7m-xqw6
reference_id GHSA-4q2w-rw7m-xqw6
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-4q2w-rw7m-xqw6
fixed_packages
0
url pkg:pypi/nnabla@1.0.10
purl pkg:pypi/nnabla@1.0.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ap51-ngfg-wkgc
1
vulnerability VCID-y22n-jyvz-zfa1
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/nnabla@1.0.10
1
url pkg:pypi/nnabla@1.0.15
purl pkg:pypi/nnabla@1.0.15
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/nnabla@1.0.15
aliases CVE-2019-10844, GHSA-4q2w-rw7m-xqw6, PYSEC-2019-107
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ap51-ngfg-wkgc
1
url VCID-y22n-jyvz-zfa1
vulnerability_id VCID-y22n-jyvz-zfa1
summary nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable, which might be untrusted.
references
0
reference_url https://github.com/sony/nnabla/issues/209
reference_id
reference_type
scores
url https://github.com/sony/nnabla/issues/209
fixed_packages
0
url pkg:pypi/nnabla@1.0.15
purl pkg:pypi/nnabla@1.0.15
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/nnabla@1.0.15
aliases PYSEC-2019-37
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y22n-jyvz-zfa1
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/nnabla@1.0.1