Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:ebuild/sys-apps/portage@2.0.51-r2

Type ebuild

Namespace sys-apps

Name portage

Version 2.0.51-r2

Qualifiers

Subpath

Is_vulnerable true

Next_non_vulnerable_version 2.0.51-r3

Latest_non_vulnerable_version 3.0.47

Affected_by_vulnerabilities

url VCID-82yx-bh37-s3d2

vulnerability_id VCID-82yx-bh37-s3d2

summary

dispatch-conf (included in Portage) and qpkg (included in Gentoolkit) are
    vulnerable to symlink attacks, potentially allowing a local user to
    overwrite arbitrary files with the rights of the user running the script.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2004-1108

reference_id

reference_type

scores

value	0.00072
scoring_system	epss
scoring_elements	0.22037
published_at	2026-06-11T12:55:00Z

value	0.00072
scoring_system	epss
scoring_elements	0.22227
published_at	2026-06-12T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2004-1108

reference_url	https://security.gentoo.org/glsa/200411-13
reference_id	GLSA-200411-13
reference_type
scores
url	https://security.gentoo.org/glsa/200411-13

fixed_packages

url	pkg:ebuild/sys-apps/portage@2.0.51-r3
purl	pkg:ebuild/sys-apps/portage@2.0.51-r3
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/sys-apps/portage@2.0.51-r3

aliases CVE-2004-1108

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-82yx-bh37-s3d2

url VCID-8jk7-ends-u7gu

vulnerability_id VCID-8jk7-ends-u7gu

summary

dispatch-conf (included in Portage) and qpkg (included in Gentoolkit) are
    vulnerable to symlink attacks, potentially allowing a local user to
    overwrite arbitrary files with the rights of the user running the script.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2004-1107

reference_id

reference_type

scores

value	0.00072
scoring_system	epss
scoring_elements	0.22037
published_at	2026-06-11T12:55:00Z

value	0.00072
scoring_system	epss
scoring_elements	0.22227
published_at	2026-06-12T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2004-1107

reference_url	https://security.gentoo.org/glsa/200411-13
reference_id	GLSA-200411-13
reference_type
scores
url	https://security.gentoo.org/glsa/200411-13

fixed_packages

url	pkg:ebuild/sys-apps/portage@2.0.51-r3
purl	pkg:ebuild/sys-apps/portage@2.0.51-r3
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/sys-apps/portage@2.0.51-r3

aliases CVE-2004-1107

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8jk7-ends-u7gu

Fixing_vulnerabilities

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/sys-apps/portage@2.0.51-r2

Package Instance