Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/illuminate/view@7.29.1
Typecomposer
Namespaceilluminate
Nameview
Version7.29.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version7.30.6
Latest_non_vulnerable_version8.75.0
Affected_by_vulnerabilities
0
url VCID-6wn3-r4pw-a3a3
vulnerability_id VCID-6wn3-r4pw-a3a3
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Laravel is a web application framework. Laravel contain a possible cross-site scripting (XSS) vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another location in their browser due to XSS. This is due to the user being able to guess the parent placeholder SHA-1 hash by trying common names of sections. If the parent template contains an exploitable HTML structure an XSS vulnerability can be exposed. This vulnerability has been patched by determining the parent placeholder at runtime and using a random hash that is unique to each request.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-43808
reference_id
reference_type
scores
0
value 0.00359
scoring_system epss
scoring_elements 0.58406
published_at 2026-06-04T12:55:00Z
1
value 0.00359
scoring_system epss
scoring_elements 0.58455
published_at 2026-06-09T12:55:00Z
2
value 0.00359
scoring_system epss
scoring_elements 0.58439
published_at 2026-06-08T12:55:00Z
3
value 0.00359
scoring_system epss
scoring_elements 0.58462
published_at 2026-06-06T12:55:00Z
4
value 0.00359
scoring_system epss
scoring_elements 0.58453
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-43808
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43808
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43808
2
reference_url https://github.com/laravel/framework
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laravel/framework
3
reference_url https://github.com/laravel/framework/commit/b8174169b1807f36de1837751599e2828ceddb9b
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laravel/framework/commit/b8174169b1807f36de1837751599e2828ceddb9b
4
reference_url https://github.com/laravel/framework/pull/39906
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laravel/framework/pull/39906
5
reference_url https://github.com/laravel/framework/pull/39908
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laravel/framework/pull/39908
6
reference_url https://github.com/laravel/framework/pull/39909
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laravel/framework/pull/39909
7
reference_url https://github.com/laravel/framework/releases/tag/v6.20.42
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laravel/framework/releases/tag/v6.20.42
8
reference_url https://github.com/laravel/framework/releases/tag/v7.30.6
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laravel/framework/releases/tag/v7.30.6
9
reference_url https://github.com/laravel/framework/releases/tag/v8.75.0
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laravel/framework/releases/tag/v8.75.0
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001333
reference_id 1001333
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001333
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-43808
reference_id CVE-2021-43808
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-43808
12
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/view/CVE-2021-43808.yaml
reference_id CVE-2021-43808.YAML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/view/CVE-2021-43808.yaml
13
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/CVE-2021-43808.yaml
reference_id CVE-2021-43808.YAML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/CVE-2021-43808.yaml
14
reference_url https://github.com/advisories/GHSA-66hf-2p6w-jqfw
reference_id GHSA-66hf-2p6w-jqfw
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-66hf-2p6w-jqfw
15
reference_url https://github.com/laravel/framework/security/advisories/GHSA-66hf-2p6w-jqfw
reference_id GHSA-66hf-2p6w-jqfw
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/laravel/framework/security/advisories/GHSA-66hf-2p6w-jqfw
fixed_packages
0
url pkg:composer/illuminate/view@7.30.6
purl pkg:composer/illuminate/view@7.30.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/view@7.30.6
1
url pkg:composer/illuminate/view@8.75.0
purl pkg:composer/illuminate/view@8.75.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/view@8.75.0
aliases CVE-2021-43808, GHSA-66hf-2p6w-jqfw
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6wn3-r4pw-a3a3
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/illuminate/view@7.29.1