Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.xmlgraphics/batik-script@1.13
Typemaven
Namespaceorg.apache.xmlgraphics
Namebatik-script
Version1.13
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.17
Latest_non_vulnerable_version1.17
Affected_by_vulnerabilities
0
url VCID-hmf4-tru4-x7aj
vulnerability_id VCID-hmf4-tru4-x7aj
summary A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-42890.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-42890.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-42890
reference_id
reference_type
scores
0
value 0.00541
scoring_system epss
scoring_elements 0.68049
published_at 2026-06-05T12:55:00Z
1
value 0.00541
scoring_system epss
scoring_elements 0.6801
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-42890
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41704
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41704
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42890
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://github.com/apache/xmlgraphics-batik/commit/401aa8595f52d085d40ff5b6b4ac0dd372423082
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/xmlgraphics-batik/commit/401aa8595f52d085d40ff5b6b4ac0dd372423082
6
reference_url https://github.com/apache/xmlgraphics-batik/commit/52f7a1ad6e3110ec295a35ffc94410eef085707a
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/xmlgraphics-batik/commit/52f7a1ad6e3110ec295a35ffc94410eef085707a
7
reference_url https://github.com/apache/xmlgraphics-batik/commit/eada57c716a2757579d53017f8b2aeadaad20edd
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/xmlgraphics-batik/commit/eada57c716a2757579d53017f8b2aeadaad20edd
8
reference_url https://issues.apache.org/jira/browse/BATIK-1345
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/BATIK-1345
9
reference_url https://lists.apache.org/thread/pkvhy0nsj1h1mlon008wtzhosbtxjwly
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread/pkvhy0nsj1h1mlon008wtzhosbtxjwly
10
reference_url https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-42890
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-42890
12
reference_url https://security.gentoo.org/glsa/202401-11
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202401-11
13
reference_url http://svn.apache.org/repos/asf/xmlgraphics/batik/trunk
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/repos/asf/xmlgraphics/batik/trunk
14
reference_url https://www.debian.org/security/2022/dsa-5264
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2022/dsa-5264
15
reference_url https://xmlgraphics.apache.org/security.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://xmlgraphics.apache.org/security.html
16
reference_url http://www.openwall.com/lists/oss-security/2022/10/25/3
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2022/10/25/3
17
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2182183
reference_id 2182183
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2182183
18
reference_url https://github.com/advisories/GHSA-rwqr-m72q-v6cm
reference_id GHSA-rwqr-m72q-v6cm
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rwqr-m72q-v6cm
19
reference_url https://access.redhat.com/errata/RHSA-2023:2100
reference_id RHSA-2023:2100
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2100
20
reference_url https://usn.ubuntu.com/6117-1/
reference_id USN-6117-1
reference_type
scores
url https://usn.ubuntu.com/6117-1/
fixed_packages
0
url pkg:maven/org.apache.xmlgraphics/batik-script@1.16
purl pkg:maven/org.apache.xmlgraphics/batik-script@1.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-q3pc-1rx9-8khw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.xmlgraphics/batik-script@1.16
aliases CVE-2022-42890, GHSA-rwqr-m72q-v6cm
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hmf4-tru4-x7aj
1
url VCID-q3pc-1rx9-8khw
vulnerability_id VCID-q3pc-1rx9-8khw
summary 
Apache Batik information disclosure vulnerability
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.

A malicious SVG can probe user profile / data and send it directly as parameter to a URL.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-44730.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-44730.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-44730
reference_id
reference_type
scores
0
value 0.00516
scoring_system epss
scoring_elements 0.67041
published_at 2026-06-05T12:55:00Z
1
value 0.00516
scoring_system epss
scoring_elements 0.67
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-44730
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44730
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44730
3
reference_url https://github.com/apache/xmlgraphics-batik
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/xmlgraphics-batik
4
reference_url https://github.com/apache/xmlgraphics-batik/commit/64658ccda90deaf6bf5f5b4d4a2ec365fe648bfa
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/xmlgraphics-batik/commit/64658ccda90deaf6bf5f5b4d4a2ec365fe648bfa
5
reference_url https://github.com/apache/xmlgraphics-batik/commit/f9ae69233eadfbd392a4a08a55618f97343b467c
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/xmlgraphics-batik/commit/f9ae69233eadfbd392a4a08a55618f97343b467c
6
reference_url https://issues.apache.org/jira/browse/BATIK-1347
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/BATIK-1347
7
reference_url https://lists.apache.org/thread/58m5817jr059f4v1zogh0fngj9pwjyj0
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread/58m5817jr059f4v1zogh0fngj9pwjyj0
8
reference_url https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html
9
reference_url https://security.gentoo.org/glsa/202401-11
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202401-11
10
reference_url https://xmlgraphics.apache.org/security.html
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://xmlgraphics.apache.org/security.html
11
reference_url http://www.openwall.com/lists/oss-security/2023/08/22/3
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2023/08/22/3
12
reference_url http://www.openwall.com/lists/oss-security/2023/08/22/5
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2023/08/22/5
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2233899
reference_id 2233899
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2233899
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-44730
reference_id CVE-2022-44730
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-44730
15
reference_url https://github.com/advisories/GHSA-2474-2566-3qxp
reference_id GHSA-2474-2566-3qxp
reference_type
scores
url https://github.com/advisories/GHSA-2474-2566-3qxp
16
reference_url https://access.redhat.com/errata/RHSA-2023:5441
reference_id RHSA-2023:5441
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5441
fixed_packages
0
url pkg:maven/org.apache.xmlgraphics/batik-script@1.17
purl pkg:maven/org.apache.xmlgraphics/batik-script@1.17
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.xmlgraphics/batik-script@1.17
aliases CVE-2022-44730, GHSA-2474-2566-3qxp
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q3pc-1rx9-8khw
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.xmlgraphics/batik-script@1.13