Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/sysend@1.0.1
Typenpm
Namespace
Namesysend
Version1.0.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.10.0
Latest_non_vulnerable_version1.10.0
Affected_by_vulnerabilities
0
url VCID-7b33-e518-e3ga
vulnerability_id VCID-7b33-e518-e3ga
summary 
Exposure of Sensitive Information to an Unauthorized Actor
sysend.js is a library that allows a user to send messages between pages that are open in the same browser. Users that use cross-origin communication may have their communications intercepted. Impact is limited by the communication occurring in the same browser. This issue has been patched in sysend.js version 1.10.0. The only currently known workaround is to avoid sending communications that a user does not want to have intercepted via sysend messages.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-24762
reference_id
reference_type
scores
0
value 0.00197
scoring_system epss
scoring_elements 0.41616
published_at 2026-06-09T12:55:00Z
1
value 0.00197
scoring_system epss
scoring_elements 0.41585
published_at 2026-06-04T12:55:00Z
2
value 0.00197
scoring_system epss
scoring_elements 0.41661
published_at 2026-06-05T12:55:00Z
3
value 0.00197
scoring_system epss
scoring_elements 0.41668
published_at 2026-06-06T12:55:00Z
4
value 0.00197
scoring_system epss
scoring_elements 0.41639
published_at 2026-06-07T12:55:00Z
5
value 0.00197
scoring_system epss
scoring_elements 0.41607
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-24762
1
reference_url https://github.com/jcubic/sysend.js
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/jcubic/sysend.js
2
reference_url https://github.com/jcubic/sysend.js/commit/a24f4b776fb18191ae0f7e3d90c2c7bec459431a
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T14:48:37Z/
url https://github.com/jcubic/sysend.js/commit/a24f4b776fb18191ae0f7e3d90c2c7bec459431a
3
reference_url https://github.com/jcubic/sysend.js/issues/33
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T14:48:37Z/
url https://github.com/jcubic/sysend.js/issues/33
4
reference_url https://github.com/jcubic/sysend.js/releases/tag/1.10.0
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T14:48:37Z/
url https://github.com/jcubic/sysend.js/releases/tag/1.10.0
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-24762
reference_id CVE-2022-24762
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-24762
6
reference_url https://github.com/advisories/GHSA-4vvg-x86p-mvqc
reference_id GHSA-4vvg-x86p-mvqc
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4vvg-x86p-mvqc
7
reference_url https://github.com/jcubic/sysend.js/security/advisories/GHSA-4vvg-x86p-mvqc
reference_id GHSA-4vvg-x86p-mvqc
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T14:48:37Z/
url https://github.com/jcubic/sysend.js/security/advisories/GHSA-4vvg-x86p-mvqc
fixed_packages
0
url pkg:npm/sysend@1.10.0
purl pkg:npm/sysend@1.10.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/sysend@1.10.0
aliases CVE-2022-24762, GHSA-4vvg-x86p-mvqc
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7b33-e518-e3ga
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/sysend@1.0.1