Lookup for vulnerable packages by Package URL.
| Purl | pkg:pypi/aim@2.1.5rc1 |
| Type | pypi |
| Namespace | |
| Name | aim |
| Version | 2.1.5rc1 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | true |
| Next_non_vulnerable_version | 4.0.0.dev6 |
| Latest_non_vulnerable_version | 4.0.0.dev6 |
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-q7eu-n29k-k7ch |
| vulnerability_id |
VCID-q7eu-n29k-k7ch |
| summary |
Arbitrary file reading vulnerability in Aim |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://github.com/aimhubio/aim/pull/1003 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.6 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N |
|
| 1 |
| value |
9.2 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/aimhubio/aim/pull/1003 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/aim@3.1.0 |
| purl |
pkg:pypi/aim@3.1.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-43ch-vxyt-kbfv |
|
| 1 |
| vulnerability |
VCID-48xs-6auv-93b7 |
|
| 2 |
| vulnerability |
VCID-58xu-5k13-7bgt |
|
| 3 |
| vulnerability |
VCID-6v19-9ygv-7bfp |
|
| 4 |
| vulnerability |
VCID-awv7-mwx7-1kbh |
|
| 5 |
| vulnerability |
VCID-c53e-ajc2-b7as |
|
| 6 |
| vulnerability |
VCID-e4mr-cym9-qqak |
|
| 7 |
| vulnerability |
VCID-hbef-95hu-5bax |
|
| 8 |
| vulnerability |
VCID-jwp5-9u8a-3khc |
|
| 9 |
| vulnerability |
VCID-madg-fcb2-s7bx |
|
| 10 |
| vulnerability |
VCID-pyzv-9qst-eucm |
|
| 11 |
| vulnerability |
VCID-qpcq-ejns-2ubs |
|
| 12 |
| vulnerability |
VCID-rqgm-8gsj-qbeg |
|
| 13 |
| vulnerability |
VCID-wuev-hga2-pbbf |
|
| 14 |
| vulnerability |
VCID-wuq7-ug49-7qd9 |
|
| 15 |
| vulnerability |
VCID-x38g-62wc-p3gf |
|
| 16 |
| vulnerability |
VCID-xp81-d9at-3ke4 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/aim@3.1.0 |
|
|
| aliases |
CVE-2021-43775, GHSA-8phj-f9w2-cjcc, PYSEC-2021-839
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-q7eu-n29k-k7ch |
|
|
| Fixing_vulnerabilities |
|
| Risk_score | 4.5 |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:pypi/aim@2.1.5rc1 |