{"url":"http://public2.vulnerablecode.io/api/packages/63016?format=json","purl":"pkg:composer/contao/contao@4.4.37","type":"composer","namespace":"contao","name":"contao","version":"4.4.37","qualifiers":{},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"4.4.56","latest_non_vulnerable_version":"5.1.4","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40911?format=json","vulnerability_id":"VCID-5kwa-7kx3-kfga","summary":"Weak Password Recovery Mechanism for Forgotten Password\nContao has a Weak Password Recovery Mechanism for a Forgotten Password.","references":[{"reference_url":"https://contao.org/en/news/security-vulnerability-cve-2019-10641.html","reference_id":"","reference_type":"","scores":[],"url":"https://contao.org/en/news/security-vulnerability-cve-2019-10641.html"},{"reference_url":"https://github.com/contao/contao/commit/74c7dfafa0dfa5363a9463b486522d5d526e28fe","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/contao/contao/commit/74c7dfafa0dfa5363a9463b486522d5d526e28fe"},{"reference_url":"https://github.com/contao/contao/commit/b92e27bc7c9e59226077937f840c74ffd0f672e8","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/contao/contao/commit/b92e27bc7c9e59226077937f840c74ffd0f672e8"},{"reference_url":"https://github.com/contao/core/commit/119a1b5bd9e62d27ca2838727084d04f3b7fcd32","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/contao/core/commit/119a1b5bd9e62d27ca2838727084d04f3b7fcd32"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10641","reference_id":"CVE-2019-10641","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10641"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2019-10641.yaml","reference_id":"CVE-2019-10641.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2019-10641.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2019-10641.yaml","reference_id":"CVE-2019-10641.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2019-10641.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/CVE-2019-10641.yaml","reference_id":"CVE-2019-10641.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/CVE-2019-10641.yaml"},{"reference_url":"https://github.com/advisories/GHSA-vcgg-hp4r-87gx","reference_id":"GHSA-vcgg-hp4r-87gx","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-vcgg-hp4r-87gx"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/63016?format=json","purl":"pkg:composer/contao/contao@4.4.37","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/contao/contao@4.4.37"},{"url":"http://public2.vulnerablecode.io/api/packages/62090?format=json","purl":"pkg:composer/contao/contao@4.7.3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/contao/contao@4.7.3"}],"aliases":["CVE-2019-10641","GHSA-vcgg-hp4r-87gx"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5kwa-7kx3-kfga"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/contao/contao@4.4.37"}