Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/zendframework/zend-diactoros@1.0.0
Typecomposer
Namespacezendframework
Namezend-diactoros
Version1.0.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.0.4
Latest_non_vulnerable_version1.8.4
Affected_by_vulnerabilities
0
url VCID-twb3-9x1u-6ycz
vulnerability_id VCID-twb3-9x1u-6ycz
summary 
Cross-site Scripting
`Zend/Diactoros/Uri::filterPath` in `zend-diactoros` does not properly sanitize path input, which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks.
references
0
reference_url https://framework.zend.com/security/advisory/ZF2015-05
reference_id
reference_type
scores
url https://framework.zend.com/security/advisory/ZF2015-05
fixed_packages
0
url pkg:composer/zendframework/zend-diactoros@1.0.4
purl pkg:composer/zendframework/zend-diactoros@1.0.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/zendframework/zend-diactoros@1.0.4
aliases CVE-2015-3257
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-twb3-9x1u-6ycz
1
url VCID-wz4g-j8zt-ruff
vulnerability_id VCID-wz4g-j8zt-ruff
summary 
URL Redirection to Untrusted Site (Open Redirect)
URL Rewrite vulnerability.
references
0
reference_url https://framework.zend.com/security/advisory/ZF2018-01
reference_id
reference_type
scores
url https://framework.zend.com/security/advisory/ZF2018-01
fixed_packages
0
url pkg:composer/zendframework/zend-diactoros@1.8.4
purl pkg:composer/zendframework/zend-diactoros@1.8.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/zendframework/zend-diactoros@1.8.4
aliases ZF2018-01
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wz4g-j8zt-ruff
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/zendframework/zend-diactoros@1.0.0