{"url":"http://public2.vulnerablecode.io/api/packages/58253?format=json","purl":"pkg:composer/typo3/cms-core@8.7.27","type":"composer","namespace":"typo3","name":"cms-core","version":"8.7.27","qualifiers":{},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"8.7.55","latest_non_vulnerable_version":"14.0.2","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41131?format=json","vulnerability_id":"VCID-1knh-es99-dubw","summary":"Code Injection\nArbitrary Code Execution and Cross-Site Scripting in Backend API.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-019/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-019/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58253?format=json","purl":"pkg:composer/typo3/cms-core@8.7.27","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27"},{"url":"http://public2.vulnerablecode.io/api/packages/58254?format=json","purl":"pkg:composer/typo3/cms-core@9.5.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8"}],"aliases":["GMS-2019-168"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1knh-es99-dubw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41121?format=json","vulnerability_id":"VCID-6ffw-r4k7-5qf8","summary":"Security Misconfiguration in Frontend Session Handling.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-018/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-018/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58253?format=json","purl":"pkg:composer/typo3/cms-core@8.7.27","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27"},{"url":"http://public2.vulnerablecode.io/api/packages/58254?format=json","purl":"pkg:composer/typo3/cms-core@9.5.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8"}],"aliases":["GMS-2019-167"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6ffw-r4k7-5qf8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41119?format=json","vulnerability_id":"VCID-82ds-xda8-5ye4","summary":"Insecure Deserialization in TYPO3 CMS.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-020/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-020/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58253?format=json","purl":"pkg:composer/typo3/cms-core@8.7.27","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27"},{"url":"http://public2.vulnerablecode.io/api/packages/58254?format=json","purl":"pkg:composer/typo3/cms-core@9.5.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8"}],"aliases":["GMS-2019-169"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-82ds-xda8-5ye4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41125?format=json","vulnerability_id":"VCID-cv9x-ea8e-pufu","summary":"Cross-site Scripting\nCross-Site Scripting in Link Handling.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-015/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-015/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58253?format=json","purl":"pkg:composer/typo3/cms-core@8.7.27","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27"},{"url":"http://public2.vulnerablecode.io/api/packages/58254?format=json","purl":"pkg:composer/typo3/cms-core@9.5.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8"}],"aliases":["GMS-2019-166"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-cv9x-ea8e-pufu"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41126?format=json","vulnerability_id":"VCID-e8ze-umec-a7hx","summary":"Information Disclosure in Backend User Interface.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-014/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-014/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58253?format=json","purl":"pkg:composer/typo3/cms-core@8.7.27","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27"},{"url":"http://public2.vulnerablecode.io/api/packages/58254?format=json","purl":"pkg:composer/typo3/cms-core@9.5.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8"}],"aliases":["GMS-2019-165"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-e8ze-umec-a7hx"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27"}