Lookup for vulnerable packages by Package URL.

Purlpkg:composer/drupal/core@8.5.3
Typecomposer
Namespacedrupal
Namecore
Version8.5.3
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version8.5.11
Latest_non_vulnerable_version11.2.8
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-a4u4-ga84-wyf9
vulnerability_id VCID-a4u4-ga84-wyf9
summary arbitrary command execution
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7602
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7602
1
reference_url https://github.com/drupal/core
reference_id
reference_type
scores
url https://github.com/drupal/core
2
reference_url https://lists.debian.org/debian-lts-announce/2018/04/msg00030.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2018/04/msg00030.html
3
reference_url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-7602
reference_id
reference_type
scores
url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-7602
4
reference_url https://www.debian.org/security/2018/dsa-4180
reference_id
reference_type
scores
url https://www.debian.org/security/2018/dsa-4180
5
reference_url https://www.drupal.org/sa-core-2018-004
reference_id
reference_type
scores
url https://www.drupal.org/sa-core-2018-004
6
reference_url https://www.exploit-db.com/exploits/44542
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/44542
7
reference_url https://www.exploit-db.com/exploits/44557
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/44557
8
reference_url https://security.archlinux.org/ASA-201804-10
reference_id ASA-201804-10
reference_type
scores
url https://security.archlinux.org/ASA-201804-10
9
reference_url https://security.archlinux.org/AVG-679
reference_id AVG-679
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-679
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-7602
reference_id CVE-2018-7602
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-7602
11
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2018-7602.yaml
reference_id CVE-2018-7602.YAML
reference_type
scores
url https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2018-7602.yaml
12
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2018-7602.yaml
reference_id CVE-2018-7602.YAML
reference_type
scores
url https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2018-7602.yaml
13
reference_url https://github.com/advisories/GHSA-297x-j9pm-xjgg
reference_id GHSA-297x-j9pm-xjgg
reference_type
scores
url https://github.com/advisories/GHSA-297x-j9pm-xjgg
fixed_packages
0
url pkg:composer/drupal/core@7.59.0
purl pkg:composer/drupal/core@7.59.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@7.59.0
1
url pkg:composer/drupal/core@8.4.8
purl pkg:composer/drupal/core@8.4.8
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.4.8
2
url pkg:composer/drupal/core@8.5.3
purl pkg:composer/drupal/core@8.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.5.3
aliases CVE-2018-7602, GHSA-297x-j9pm-xjgg
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a4u4-ga84-wyf9
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.5.3