{"url":"http://public2.vulnerablecode.io/api/packages/71647?format=json","purl":"pkg:pypi/rdiffweb@1.3.1b2","type":"pypi","namespace":"","name":"rdiffweb","version":"1.3.1b2","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"2.5.0a3","latest_non_vulnerable_version":"2.8.4","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/211320?format=json","vulnerability_id":"VCID-1232-9g23-pye7","summary":"rdiffweb Missing Custom Error Page","references":[{"reference_url":"https://github.com/ikus060/rdiffweb/blob/4d1232cd0586eb79d1a921969f8f7a198a00d92b/README.md?plain=1#L149","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ikus060/rdiffweb/blob/4d1232cd0586eb79d1a921969f8f7a198a00d92b/README.md?plain=1#L149"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-273.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-273.yaml"},{"reference_url":"https://huntr.dev/bounties/c40badc3-c9e7-4b69-9e2e-2b9f05865159","reference_id":"","reference_type":"","scores":[],"url":"https://huntr.dev/bounties/c40badc3-c9e7-4b69-9e2e-2b9f05865159"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3175","reference_id":"CVE-2022-3175","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3175"},{"reference_url":"https://github.com/advisories/GHSA-ch4c-278q-5654","reference_id":"GHSA-ch4c-278q-5654","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-ch4c-278q-5654"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26174?format=json","purl":"pkg:pypi/rdiffweb@2.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-1m9h-vrvu-abb8"},{"vulnerability":"VCID-1sm3-y4rz-33ef"},{"vulnerability":"VCID-22gc-9xf5-hqdq"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-7tka-pn6b-jbb2"},{"vulnerability":"VCID-99fm-uh18-sfed"},{"vulnerability":"VCID-9u3k-3p83-p3ab"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-d7ed-wxmn-1uak"},{"vulnerability":"VCID-dy7w-yh68-wyej"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-fdqp-6av7-bfb3"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r5k3-8ezc-9uad"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-tbz3-msw6-87cs"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"},{"vulnerability":"VCID-zp3a-ty3v-p7es"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2"}],"aliases":["CVE-2022-3175","GHSA-ch4c-278q-5654","PYSEC-2022-273"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1232-9g23-pye7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/175053?format=json","vulnerability_id":"VCID-1jq8-v6r3-m3c1","summary":"Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.","references":[{"reference_url":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin","reference_id":"","reference_type":"","scores":[],"url":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43161.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43161.yaml"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/afc1bdfab5161c74012ff2590a6ec49cc0d8fde0","reference_id":"afc1bdfab5161c74012ff2590a6ec49cc0d8fde0","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-15T14:47:37Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/afc1bdfab5161c74012ff2590a6ec49cc0d8fde0"},{"reference_url":"https://huntr.dev/bounties/cfcab02e-d6ad-4dcf-b1b0-da90434bc55b","reference_id":"cfcab02e-d6ad-4dcf-b1b0-da90434bc55b","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-15T14:47:37Z/"}],"url":"https://huntr.dev/bounties/cfcab02e-d6ad-4dcf-b1b0-da90434bc55b"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3457","reference_id":"CVE-2022-3457","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3457"},{"reference_url":"https://github.com/advisories/GHSA-824x-jcxf-hpfg","reference_id":"GHSA-824x-jcxf-hpfg","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-824x-jcxf-hpfg"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27373?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a5","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a5"},{"url":"http://public2.vulnerablecode.io/api/packages/27265?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3457","GHSA-824x-jcxf-hpfg","PYSEC-2022-43161"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1jq8-v6r3-m3c1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174796?format=json","vulnerability_id":"VCID-1m9h-vrvu-abb8","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-293.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-293.yaml"},{"reference_url":"https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233","reference_id":"202dd03a-3d97-4c64-bc73-1a0f36614233","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T20:28:35Z/"}],"url":"https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3","reference_id":"667657c6fe2b336c90be37f37fb92f65df4feee3","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T20:28:35Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3295","reference_id":"CVE-2022-3295","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3295"},{"reference_url":"https://github.com/advisories/GHSA-hrj7-f62f-j7x7","reference_id":"GHSA-hrj7-f62f-j7x7","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-hrj7-f62f-j7x7"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27084?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3295","GHSA-hrj7-f62f-j7x7","PYSEC-2022-293"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1m9h-vrvu-abb8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174794?format=json","vulnerability_id":"VCID-1sm3-y4rz-33ef","summary":"Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-291.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-291.yaml"},{"reference_url":"https://huntr.com/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38","reference_id":"","reference_type":"","scores":[],"url":"https://huntr.com/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3","reference_id":"667657c6fe2b336c90be37f37fb92f65df4feee3","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-21T15:12:53Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3"},{"reference_url":"https://huntr.dev/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38","reference_id":"733678b9-daa1-4d6a-875a-382fa09a6e38","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-21T15:12:53Z/"}],"url":"https://huntr.dev/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3272","reference_id":"CVE-2022-3272","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3272"},{"reference_url":"https://github.com/advisories/GHSA-qrj3-hrgj-fm7r","reference_id":"GHSA-qrj3-hrgj-fm7r","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-qrj3-hrgj-fm7r"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27084?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3272","GHSA-qrj3-hrgj-fm7r","PYSEC-2022-291"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1sm3-y4rz-33ef"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174981?format=json","vulnerability_id":"VCID-22gc-9xf5-hqdq","summary":"Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-287.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-287.yaml"},{"reference_url":"https://huntr.dev/bounties/39889a3f-8bb7-448a-b0d4-a18c671bbd23","reference_id":"39889a3f-8bb7-448a-b0d4-a18c671bbd23","reference_type":"","scores":[{"value":"4.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-28T13:43:20Z/"}],"url":"https://huntr.dev/bounties/39889a3f-8bb7-448a-b0d4-a18c671bbd23"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/ac334dd27ceadac0661b1e2e059a8423433c3fee","reference_id":"ac334dd27ceadac0661b1e2e059a8423433c3fee","reference_type":"","scores":[{"value":"4.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-28T13:43:20Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/ac334dd27ceadac0661b1e2e059a8423433c3fee"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3250","reference_id":"CVE-2022-3250","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3250"},{"reference_url":"https://github.com/advisories/GHSA-m748-hjqg-rpp8","reference_id":"GHSA-m748-hjqg-rpp8","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-m748-hjqg-rpp8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26928?format=json","purl":"pkg:pypi/rdiffweb@2.4.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-1m9h-vrvu-abb8"},{"vulnerability":"VCID-1sm3-y4rz-33ef"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-7tka-pn6b-jbb2"},{"vulnerability":"VCID-99fm-uh18-sfed"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-d7ed-wxmn-1uak"},{"vulnerability":"VCID-dy7w-yh68-wyej"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r5k3-8ezc-9uad"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6"}],"aliases":["CVE-2022-3250","GHSA-m748-hjqg-rpp8","PYSEC-2022-287"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-22gc-9xf5-hqdq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/168787?format=json","vulnerability_id":"VCID-2eka-zuqa-fqaw","summary":"Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://github.com/advisories/GHSA-2wpw-cm9w-v4xm","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-2wpw-cm9w-v4xm"},{"reference_url":"https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09","reference_id":"9f746881-ad42-446b-9b1d-153391eacc09","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:49:14Z/"}],"url":"https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d","reference_id":"bc4bed89affcba71251fe54ed10639da9d392c1d","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:49:14Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/73451?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-cwte-w97m-f3gd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4719","GHSA-2wpw-cm9w-v4xm","PYSEC-2022-43005"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2eka-zuqa-fqaw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/168463?format=json","vulnerability_id":"VCID-2nka-f5cw-7kbh","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://github.com/advisories/GHSA-7q4r-x5qg-mmcp","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-7q4r-x5qg-mmcp"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/6e9ee210548f6d3210704cac302cfc7cdb239765","reference_id":"6e9ee210548f6d3210704cac302cfc7cdb239765","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:16:53Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/6e9ee210548f6d3210704cac302cfc7cdb239765"},{"reference_url":"https://huntr.dev/bounties/9369681b-8bfc-4146-a54c-c5108442d92c","reference_id":"9369681b-8bfc-4146-a54c-c5108442d92c","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:16:53Z/"}],"url":"https://huntr.dev/bounties/9369681b-8bfc-4146-a54c-c5108442d92c"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/73451?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-cwte-w97m-f3gd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4723","GHSA-7q4r-x5qg-mmcp","PYSEC-2022-43009"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2nka-f5cw-7kbh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174568?format=json","vulnerability_id":"VCID-3hr2-bzjs-v7ae","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43160.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43160.yaml"},{"reference_url":"https://huntr.dev/bounties/b34412ca-50c5-4615-b7e3-5d07d33acfce","reference_id":"b34412ca-50c5-4615-b7e3-5d07d33acfce","reference_type":"","scores":[{"value":"5.6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-15T14:49:44Z/"}],"url":"https://huntr.dev/bounties/b34412ca-50c5-4615-b7e3-5d07d33acfce"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311","reference_id":"b78ec09f4582e363f6f449df6f987127e126c311","reference_type":"","scores":[{"value":"5.6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-15T14:49:44Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3456","reference_id":"CVE-2022-3456","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3456"},{"reference_url":"https://github.com/advisories/GHSA-92gf-p376-6r9r","reference_id":"GHSA-92gf-p376-6r9r","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-92gf-p376-6r9r"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27265?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3456","GHSA-92gf-p376-6r9r","PYSEC-2022-43160"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3hr2-bzjs-v7ae"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/169027?format=json","vulnerability_id":"VCID-4b33-2gjf-pqaz","summary":"Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://github.com/advisories/GHSA-83pm-7v48-5jp4","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-83pm-7v48-5jp4"},{"reference_url":"https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720","reference_id":"3c48ef5d-da4d-4ee4-aaca-af65e7273720","reference_type":"","scores":[{"value":"6.6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:47:29Z/"}],"url":"https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d","reference_id":"6afaae56a29536f0118b3380d296c416aa6d078d","reference_type":"","scores":[{"value":"6.6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:47:29Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/73451?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-cwte-w97m-f3gd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4721","GHSA-83pm-7v48-5jp4","PYSEC-2022-43007"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4b33-2gjf-pqaz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/211435?format=json","vulnerability_id":"VCID-548j-5gva-qqe6","summary":"rdiffweb allows a new password to be the same as the previous password","references":[{"reference_url":"https://github.com/ikus060/rdiffweb/commit/2ffc2af65c8f8113b06e0b89929c604bcdf844b9","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://github.com/ikus060/rdiffweb/commit/2ffc2af65c8f8113b06e0b89929c604bcdf844b9"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43157.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43157.yaml"},{"reference_url":"https://huntr.dev/bounties/a9021e93-6d18-4ac1-98ce-550c4697a4ed","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://huntr.dev/bounties/a9021e93-6d18-4ac1-98ce-550c4697a4ed"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3376","reference_id":"CVE-2022-3376","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3376"},{"reference_url":"https://github.com/advisories/GHSA-7wr6-fj4x-893v","reference_id":"GHSA-7wr6-fj4x-893v","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-7wr6-fj4x-893v"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/71873?format=json","purl":"pkg:pypi/rdiffweb@2.4.11a1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1"},{"url":"http://public2.vulnerablecode.io/api/packages/27265?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3376","GHSA-7wr6-fj4x-893v","PYSEC-2022-43157"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-548j-5gva-qqe6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/211296?format=json","vulnerability_id":"VCID-7mu4-uyus-ube5","summary":"rdiffweb vulnerable to Improper Restriction of Rendered UI Layers or Frames","references":[{"reference_url":"https://github.com/ikus060/rdiffweb/commit/7294bb7466532762c93d711211e5958940c1b428","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ikus060/rdiffweb/commit/7294bb7466532762c93d711211e5958940c1b428"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-268.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-268.yaml"},{"reference_url":"https://huntr.dev/bounties/e5c2625b-34cc-4805-8223-80f2689e4e5c","reference_id":"","reference_type":"","scores":[],"url":"https://huntr.dev/bounties/e5c2625b-34cc-4805-8223-80f2689e4e5c"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3167","reference_id":"CVE-2022-3167","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3167"},{"reference_url":"https://github.com/advisories/GHSA-m379-x4xc-38x9","reference_id":"GHSA-m379-x4xc-38x9","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-m379-x4xc-38x9"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26140?format=json","purl":"pkg:pypi/rdiffweb@2.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1232-9g23-pye7"},{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-1m9h-vrvu-abb8"},{"vulnerability":"VCID-1sm3-y4rz-33ef"},{"vulnerability":"VCID-22gc-9xf5-hqdq"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-7tka-pn6b-jbb2"},{"vulnerability":"VCID-99fm-uh18-sfed"},{"vulnerability":"VCID-9u3k-3p83-p3ab"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3kd-3tbb-f3eq"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-d7ed-wxmn-1uak"},{"vulnerability":"VCID-dy7w-yh68-wyej"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-fdqp-6av7-bfb3"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r5k3-8ezc-9uad"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-sqdy-e2sm-vfbv"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-tbz3-msw6-87cs"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"},{"vulnerability":"VCID-zp3a-ty3v-p7es"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.1"}],"aliases":["CVE-2022-3167","GHSA-m379-x4xc-38x9","PYSEC-2022-268"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7mu4-uyus-ube5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/175174?format=json","vulnerability_id":"VCID-7tka-pn6b-jbb2","summary":"Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-290.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-290.yaml"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/39e7dcd4a1f44d2a7bd92b79d78a800910b1b22b","reference_id":"39e7dcd4a1f44d2a7bd92b79d78a800910b1b22b","reference_type":"","scores":[{"value":"6.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-22T15:53:26Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/39e7dcd4a1f44d2a7bd92b79d78a800910b1b22b"},{"reference_url":"https://huntr.dev/bounties/67c25969-5e7a-4424-817e-e1a918f63cc6","reference_id":"67c25969-5e7a-4424-817e-e1a918f63cc6","reference_type":"","scores":[{"value":"6.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-22T15:53:26Z/"}],"url":"https://huntr.dev/bounties/67c25969-5e7a-4424-817e-e1a918f63cc6"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3269","reference_id":"CVE-2022-3269","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3269"},{"reference_url":"https://github.com/advisories/GHSA-j3q4-gmj4-mj95","reference_id":"GHSA-j3q4-gmj4-mj95","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-j3q4-gmj4-mj95"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27002?format=json","purl":"pkg:pypi/rdiffweb@2.4.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-1m9h-vrvu-abb8"},{"vulnerability":"VCID-1sm3-y4rz-33ef"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-d7ed-wxmn-1uak"},{"vulnerability":"VCID-dy7w-yh68-wyej"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r5k3-8ezc-9uad"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.7"}],"aliases":["CVE-2022-3269","GHSA-j3q4-gmj4-mj95","PYSEC-2022-290"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7tka-pn6b-jbb2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/175128?format=json","vulnerability_id":"VCID-99fm-uh18-sfed","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-289.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-289.yaml"},{"reference_url":"https://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f","reference_id":"8834c356-4ddb-4be7-898b-d76f480e9c3f","reference_type":"","scores":[{"value":"7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-22T16:00:42Z/"}],"url":"https://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3274","reference_id":"CVE-2022-3274","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3274"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/e974df75bdbcff3996ad70bd1b4424ec1485ea3f","reference_id":"e974df75bdbcff3996ad70bd1b4424ec1485ea3f","reference_type":"","scores":[{"value":"7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-22T16:00:42Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/e974df75bdbcff3996ad70bd1b4424ec1485ea3f"},{"reference_url":"https://github.com/advisories/GHSA-gmj8-84r4-h46j","reference_id":"GHSA-gmj8-84r4-h46j","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-gmj8-84r4-h46j"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27002?format=json","purl":"pkg:pypi/rdiffweb@2.4.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-1m9h-vrvu-abb8"},{"vulnerability":"VCID-1sm3-y4rz-33ef"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-d7ed-wxmn-1uak"},{"vulnerability":"VCID-dy7w-yh68-wyej"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r5k3-8ezc-9uad"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.7"}],"aliases":["CVE-2022-3274","GHSA-gmj8-84r4-h46j","PYSEC-2022-289"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-99fm-uh18-sfed"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/211392?format=json","vulnerability_id":"VCID-9u3k-3p83-p3ab","summary":"rdiffweb CSRF vulnerability in admin area can lead to deletion of repositories and users","references":[{"reference_url":"https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-281.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-281.yaml"},{"reference_url":"https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c","reference_id":"","reference_type":"","scores":[],"url":"https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3232","reference_id":"CVE-2022-3232","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3232"},{"reference_url":"https://github.com/advisories/GHSA-cw2v-wv4g-w4p6","reference_id":"GHSA-cw2v-wv4g-w4p6","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-cw2v-wv4g-w4p6"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26870?format=json","purl":"pkg:pypi/rdiffweb@2.4.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-1m9h-vrvu-abb8"},{"vulnerability":"VCID-1sm3-y4rz-33ef"},{"vulnerability":"VCID-22gc-9xf5-hqdq"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-7tka-pn6b-jbb2"},{"vulnerability":"VCID-99fm-uh18-sfed"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-d7ed-wxmn-1uak"},{"vulnerability":"VCID-dy7w-yh68-wyej"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r5k3-8ezc-9uad"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-tbz3-msw6-87cs"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"},{"vulnerability":"VCID-zp3a-ty3v-p7es"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.5"}],"aliases":["CVE-2022-3232","GHSA-cw2v-wv4g-w4p6","PYSEC-2022-281"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-9u3k-3p83-p3ab"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174558?format=json","vulnerability_id":"VCID-aqp5-z8th-7ubn","summary":"Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42978.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42978.yaml"},{"reference_url":"https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e","reference_id":"b8a40ba6-2452-4abe-a80a-2d065ee8891e","reference_type":"","scores":[{"value":"2.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-07T18:29:00Z/"}],"url":"https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2","reference_id":"c27c46bac656b1da74f28eac1b52dfa5df76e6f2","reference_type":"","scores":[{"value":"2.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-07T18:29:00Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3363","reference_id":"CVE-2022-3363","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3363"},{"reference_url":"https://github.com/advisories/GHSA-jw36-mrvg-j5fx","reference_id":"GHSA-jw36-mrvg-j5fx","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-jw36-mrvg-j5fx"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27662?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a7"},{"url":"http://public2.vulnerablecode.io/api/packages/27265?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3363","GHSA-jw36-mrvg-j5fx","PYSEC-2022-42978"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-aqp5-z8th-7ubn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/168588?format=json","vulnerability_id":"VCID-atc1-2w9t-43d6","summary":"Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.","references":[{"reference_url":"https://github.com/advisories/GHSA-639f-hxcv-84mc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-639f-hxcv-84mc"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/5f861670ef8f38ca8eea52a98672d0e0fabb5368","reference_id":"5f861670ef8f38ca8eea52a98672d0e0fabb5368","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T18:32:13Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/5f861670ef8f38ca8eea52a98672d0e0fabb5368"},{"reference_url":"https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0","reference_id":"77e5f425-c764-4cb0-936a-7a76bfcf19b0","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T18:32:13Z/"}],"url":"https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/72801?format=json","purl":"pkg:pypi/rdiffweb@2.5.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-w75b-cyzd-3ucz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.4"}],"aliases":["CVE-2022-4644","GHSA-639f-hxcv-84mc","PYSEC-2022-43003"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-atc1-2w9t-43d6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174648?format=json","vulnerability_id":"VCID-c8a3-sja5-h3fa","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-298.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-298.yaml"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b62c479ff6979563c7c23e7182942bc4f460a2c7","reference_id":"b62c479ff6979563c7c23e7182942bc4f460a2c7","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:04:28Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/b62c479ff6979563c7c23e7182942bc4f460a2c7"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3364","reference_id":"CVE-2022-3364","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3364"},{"reference_url":"https://huntr.dev/bounties/e70ad507-1424-463b-bdf1-c4a6fbe6e720","reference_id":"e70ad507-1424-463b-bdf1-c4a6fbe6e720","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:04:28Z/"}],"url":"https://huntr.dev/bounties/e70ad507-1424-463b-bdf1-c4a6fbe6e720"},{"reference_url":"https://github.com/advisories/GHSA-fqfg-c577-2vc3","reference_id":"GHSA-fqfg-c577-2vc3","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-fqfg-c577-2vc3"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27263?format=json","purl":"pkg:pypi/rdiffweb@2.4.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10"},{"url":"http://public2.vulnerablecode.io/api/packages/27159?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a3"}],"aliases":["CVE-2022-3364","GHSA-fqfg-c577-2vc3","PYSEC-2022-298"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-c8a3-sja5-h3fa"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/211447?format=json","vulnerability_id":"VCID-cv8a-cfqn-nfd4","summary":"rdiffweb vulnerable to Open Redirect","references":[{"reference_url":"https://github.com/ikus060/rdiffweb/commit/4d464b467f14b8eb9103d7f5f0774e49995527c7","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://github.com/ikus060/rdiffweb/commit/4d464b467f14b8eb9103d7f5f0774e49995527c7"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43158.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43158.yaml"},{"reference_url":"https://huntr.dev/bounties/bc5689e4-221a-4200-a8ab-42c659f89f67","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://huntr.dev/bounties/bc5689e4-221a-4200-a8ab-42c659f89f67"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3438","reference_id":"CVE-2022-3438","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3438"},{"reference_url":"https://github.com/advisories/GHSA-8g9m-vv69-7j99","reference_id":"GHSA-8g9m-vv69-7j99","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-8g9m-vv69-7j99"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27288?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a4"},{"url":"http://public2.vulnerablecode.io/api/packages/27265?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3438","GHSA-8g9m-vv69-7j99","PYSEC-2022-43158"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-cv8a-cfqn-nfd4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/133802?format=json","vulnerability_id":"VCID-cwte-w97m-f3gd","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.","references":[{"reference_url":"https://github.com/advisories/GHSA-c4rv-2j6x-pq7x","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://github.com/advisories/GHSA-c4rv-2j6x-pq7x"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/06f89b43469aae70e8833e55192721523f86c5a2","reference_id":"06f89b43469aae70e8833e55192721523f86c5a2","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-23T17:12:56Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/06f89b43469aae70e8833e55192721523f86c5a2"},{"reference_url":"https://huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce","reference_id":"8d0e0804-d3fd-49fe-bfa4-7a91135767ce","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-23T17:12:56Z/"}],"url":"https://huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/78627?format=json","purl":"pkg:pypi/rdiffweb@2.8.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.8.4"}],"aliases":["CVE-2023-5289","GHSA-c4rv-2j6x-pq7x","PYSEC-2023-186"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-cwte-w97m-f3gd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/211321?format=json","vulnerability_id":"VCID-d3kd-3tbb-f3eq","summary":"rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute","references":[{"reference_url":"https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7e","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7e"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-271.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-271.yaml"},{"reference_url":"https://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce","reference_id":"","reference_type":"","scores":[],"url":"https://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3174","reference_id":"CVE-2022-3174","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3174"},{"reference_url":"https://github.com/advisories/GHSA-mjw4-xvx6-3grg","reference_id":"GHSA-mjw4-xvx6-3grg","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-mjw4-xvx6-3grg"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26174?format=json","purl":"pkg:pypi/rdiffweb@2.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-1m9h-vrvu-abb8"},{"vulnerability":"VCID-1sm3-y4rz-33ef"},{"vulnerability":"VCID-22gc-9xf5-hqdq"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-7tka-pn6b-jbb2"},{"vulnerability":"VCID-99fm-uh18-sfed"},{"vulnerability":"VCID-9u3k-3p83-p3ab"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-d7ed-wxmn-1uak"},{"vulnerability":"VCID-dy7w-yh68-wyej"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-fdqp-6av7-bfb3"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r5k3-8ezc-9uad"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-tbz3-msw6-87cs"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"},{"vulnerability":"VCID-zp3a-ty3v-p7es"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2"}],"aliases":["CVE-2022-3174","GHSA-mjw4-xvx6-3grg","PYSEC-2022-271"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-d3kd-3tbb-f3eq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/211434?format=json","vulnerability_id":"VCID-d3u8-9d5e-6uh8","summary":"rdiffweb does not have a rate limit on incorrect password attempts to prevent brute force attacks","references":[{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43156.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43156.yaml"},{"reference_url":"https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3273","reference_id":"CVE-2022-3273","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3273"},{"reference_url":"https://github.com/advisories/GHSA-9g3v-v24q-jj5p","reference_id":"GHSA-9g3v-v24q-jj5p","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-9g3v-v24q-jj5p"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/71873?format=json","purl":"pkg:pypi/rdiffweb@2.4.11a1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1"},{"url":"http://public2.vulnerablecode.io/api/packages/27265?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3273","GHSA-9g3v-v24q-jj5p","PYSEC-2022-43156"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-d3u8-9d5e-6uh8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174834?format=json","vulnerability_id":"VCID-d7ed-wxmn-1uak","summary":"Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-295.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-295.yaml"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e","reference_id":"5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T17:47:00Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3301","reference_id":"CVE-2022-3301","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3301"},{"reference_url":"https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a","reference_id":"d3bf1e5d-055a-44b8-8d60-54ab966ed63a","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T17:47:00Z/"}],"url":"https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a"},{"reference_url":"https://github.com/advisories/GHSA-qq29-5vjh-vxwr","reference_id":"GHSA-qq29-5vjh-vxwr","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-qq29-5vjh-vxwr"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27084?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3301","GHSA-qq29-5vjh-vxwr","PYSEC-2022-295"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-d7ed-wxmn-1uak"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174683?format=json","vulnerability_id":"VCID-dy7w-yh68-wyej","summary":"Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-292.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-292.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43184.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43184.yaml"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3","reference_id":"667657c6fe2b336c90be37f37fb92f65df4feee3","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T20:06:59Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3290","reference_id":"CVE-2022-3290","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3290"},{"reference_url":"https://huntr.dev/bounties/d8b8519d-96a5-484c-8141-624c54290bf5","reference_id":"d8b8519d-96a5-484c-8141-624c54290bf5","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T20:06:59Z/"}],"url":"https://huntr.dev/bounties/d8b8519d-96a5-484c-8141-624c54290bf5"},{"reference_url":"https://github.com/advisories/GHSA-5v95-j4rr-6f3c","reference_id":"GHSA-5v95-j4rr-6f3c","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-5v95-j4rr-6f3c"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27084?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3290","GHSA-5v95-j4rr-6f3c","PYSEC-2022-292","PYSEC-2022-43184"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dy7w-yh68-wyej"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/175087?format=json","vulnerability_id":"VCID-euj6-ja79-u3et","summary":"Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-296.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-296.yaml"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/2406780831618405a13113377a784f3102465f40","reference_id":"2406780831618405a13113377a784f3102465f40","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T14:22:00Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/2406780831618405a13113377a784f3102465f40"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3292","reference_id":"CVE-2022-3292","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3292"},{"reference_url":"https://huntr.dev/bounties/e9309018-e94f-4e15-b7d1-5d38b6021c5d","reference_id":"e9309018-e94f-4e15-b7d1-5d38b6021c5d","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T14:22:00Z/"}],"url":"https://huntr.dev/bounties/e9309018-e94f-4e15-b7d1-5d38b6021c5d"},{"reference_url":"https://github.com/advisories/GHSA-7fqm-jm52-f9vc","reference_id":"GHSA-7fqm-jm52-f9vc","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-7fqm-jm52-f9vc"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27084?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"},{"url":"http://public2.vulnerablecode.io/api/packages/27149?format=json","purl":"pkg:pypi/rdiffweb@2.4.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.9"}],"aliases":["CVE-2022-3292","GHSA-7fqm-jm52-f9vc","PYSEC-2022-296"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-euj6-ja79-u3et"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/211337?format=json","vulnerability_id":"VCID-fdqp-6av7-bfb3","summary":"rdiffweb CSRF vulnerability in profile's SSH keys can lead to unauthorized access","references":[{"reference_url":"https://github.com/ikus060/rdiffweb/commit/9125f5a2d918fed0f3fc1c86fa94cd1779ed9f73","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ikus060/rdiffweb/commit/9125f5a2d918fed0f3fc1c86fa94cd1779ed9f73"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-278.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-278.yaml"},{"reference_url":"https://huntr.dev/bounties/1fa1aac9-b16a-4a70-a7da-960b3908ae1d","reference_id":"","reference_type":"","scores":[],"url":"https://huntr.dev/bounties/1fa1aac9-b16a-4a70-a7da-960b3908ae1d"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3221","reference_id":"CVE-2022-3221","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3221"},{"reference_url":"https://github.com/advisories/GHSA-vq4h-xrwc-m639","reference_id":"GHSA-vq4h-xrwc-m639","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-vq4h-xrwc-m639"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26292?format=json","purl":"pkg:pypi/rdiffweb@2.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-1m9h-vrvu-abb8"},{"vulnerability":"VCID-1sm3-y4rz-33ef"},{"vulnerability":"VCID-22gc-9xf5-hqdq"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-7tka-pn6b-jbb2"},{"vulnerability":"VCID-99fm-uh18-sfed"},{"vulnerability":"VCID-9u3k-3p83-p3ab"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-d7ed-wxmn-1uak"},{"vulnerability":"VCID-dy7w-yh68-wyej"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r5k3-8ezc-9uad"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-tbz3-msw6-87cs"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"},{"vulnerability":"VCID-zp3a-ty3v-p7es"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.3"}],"aliases":["CVE-2022-3221","GHSA-vq4h-xrwc-m639","PYSEC-2022-278"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fdqp-6av7-bfb3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/168594?format=json","vulnerability_id":"VCID-m2ag-9yup-6ydg","summary":"Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43001.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43001.yaml"},{"reference_url":"https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5","reference_id":"5340c2f6-0252-40f6-8929-cca5d64958a5","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T18:19:15Z/"}],"url":"https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4018","reference_id":"CVE-2022-4018","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4018"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095","reference_id":"f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T18:19:15Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095"},{"reference_url":"https://github.com/advisories/GHSA-4wph-9vrm-6v3w","reference_id":"GHSA-4wph-9vrm-6v3w","reference_type":"","scores":[{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-4wph-9vrm-6v3w"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/71873?format=json","purl":"pkg:pypi/rdiffweb@2.4.11a1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1"},{"url":"http://public2.vulnerablecode.io/api/packages/27924?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a6"}],"aliases":["CVE-2022-4018","GHSA-4wph-9vrm-6v3w","PYSEC-2022-43001"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-m2ag-9yup-6ydg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/175093?format=json","vulnerability_id":"VCID-m4hv-bujs-kue6","summary":"Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-297.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-297.yaml"},{"reference_url":"https://huntr.dev/bounties/1f6a5e49-23f2-45f7-8661-19f9cee8ae97","reference_id":"1f6a5e49-23f2-45f7-8661-19f9cee8ae97","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T20:22:21Z/"}],"url":"https://huntr.dev/bounties/1f6a5e49-23f2-45f7-8661-19f9cee8ae97"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3326","reference_id":"CVE-2022-3326","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3326"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/ee98e5af78ec60db8a17fef6ea0ca250e3f31eec","reference_id":"ee98e5af78ec60db8a17fef6ea0ca250e3f31eec","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T20:22:21Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/ee98e5af78ec60db8a17fef6ea0ca250e3f31eec"},{"reference_url":"https://github.com/advisories/GHSA-8wxf-c45w-g66g","reference_id":"GHSA-8wxf-c45w-g66g","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-8wxf-c45w-g66g"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27149?format=json","purl":"pkg:pypi/rdiffweb@2.4.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.9"}],"aliases":["CVE-2022-3326","GHSA-8wxf-c45w-g66g","PYSEC-2022-297"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-m4hv-bujs-kue6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/168560?format=json","vulnerability_id":"VCID-mnzk-q4ua-3fbx","summary":"Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://github.com/advisories/GHSA-m8r9-qxx8-mrxp","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-m8r9-qxx8-mrxp"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/c4a19cf67d575c4886171b8efcbf4675d51f3929","reference_id":"c4a19cf67d575c4886171b8efcbf4675d51f3929","reference_type":"","scores":[{"value":"8.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:16:04Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/c4a19cf67d575c4886171b8efcbf4675d51f3929"},{"reference_url":"https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445","reference_id":"e6fb1931-8d9c-4895-be4a-59839b4b6445","reference_type":"","scores":[{"value":"8.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:16:04Z/"}],"url":"https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/73451?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-cwte-w97m-f3gd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4724","GHSA-m8r9-qxx8-mrxp","PYSEC-2022-43010"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mnzk-q4ua-3fbx"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/168945?format=json","vulnerability_id":"VCID-neep-wzcy-8qd3","summary":"Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://github.com/advisories/GHSA-h5wp-jrqc-cwwx","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-h5wp-jrqc-cwwx"},{"reference_url":"https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70","reference_id":"339687af-6e25-4ad8-823d-c097f607ea70","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:48:42Z/"}],"url":"https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d","reference_id":"6afaae56a29536f0118b3380d296c416aa6d078d","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:48:42Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/73451?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-cwte-w97m-f3gd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4720","GHSA-h5wp-jrqc-cwwx","PYSEC-2022-43006"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-neep-wzcy-8qd3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174657?format=json","vulnerability_id":"VCID-p9hw-jxf8-7bc9","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-299.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-299.yaml"},{"reference_url":"https://huntr.dev/bounties/4e8f6136-50c7-4fa1-ac98-699bcb7b35ce","reference_id":"4e8f6136-50c7-4fa1-ac98-699bcb7b35ce","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:02:31Z/"}],"url":"https://huntr.dev/bounties/4e8f6136-50c7-4fa1-ac98-699bcb7b35ce"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b62c479ff6979563c7c23e7182942bc4f460a2c7","reference_id":"b62c479ff6979563c7c23e7182942bc4f460a2c7","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:02:31Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/b62c479ff6979563c7c23e7182942bc4f460a2c7"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3371","reference_id":"CVE-2022-3371","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3371"},{"reference_url":"https://github.com/advisories/GHSA-3fhq-72hw-jqwv","reference_id":"GHSA-3fhq-72hw-jqwv","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-3fhq-72hw-jqwv"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27263?format=json","purl":"pkg:pypi/rdiffweb@2.4.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10"},{"url":"http://public2.vulnerablecode.io/api/packages/27159?format=json","purl":"pkg:pypi/rdiffweb@2.5.0a3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a3"}],"aliases":["CVE-2022-3371","GHSA-3fhq-72hw-jqwv","PYSEC-2022-299"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-p9hw-jxf8-7bc9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174564?format=json","vulnerability_id":"VCID-r5k3-8ezc-9uad","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-294.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-294.yaml"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5","reference_id":"626cca1b75b6c587afd4241a9692e8929b1921a5","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-21T15:33:02Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3298","reference_id":"CVE-2022-3298","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3298"},{"reference_url":"https://huntr.dev/bounties/f9fedf94-41c9-49c4-8552-e407123a44e7","reference_id":"f9fedf94-41c9-49c4-8552-e407123a44e7","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-21T15:33:02Z/"}],"url":"https://huntr.dev/bounties/f9fedf94-41c9-49c4-8552-e407123a44e7"},{"reference_url":"https://github.com/advisories/GHSA-xhw9-4wqq-x67v","reference_id":"GHSA-xhw9-4wqq-x67v","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-xhw9-4wqq-x67v"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27084?format=json","purl":"pkg:pypi/rdiffweb@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8"}],"aliases":["CVE-2022-3298","GHSA-xhw9-4wqq-x67v","PYSEC-2022-294"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-r5k3-8ezc-9uad"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/211429?format=json","vulnerability_id":"VCID-r9uw-4hx9-rka1","summary":"rdiffweb Path Traversal vulnerability","references":[{"reference_url":"https://github.com/ikus060/rdiffweb/commit/323383d1db656f1b1291be529947bd943a6b0e99","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ikus060/rdiffweb/commit/323383d1db656f1b1291be529947bd943a6b0e99"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-302.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-302.yaml"},{"reference_url":"https://huntr.dev/bounties/f7d2a6ab-2faf-4719-bdb6-e4e5d6065752","reference_id":"","reference_type":"","scores":[],"url":"https://huntr.dev/bounties/f7d2a6ab-2faf-4719-bdb6-e4e5d6065752"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3389","reference_id":"CVE-2022-3389","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3389"},{"reference_url":"https://github.com/advisories/GHSA-hrrm-895h-xh34","reference_id":"GHSA-hrrm-895h-xh34","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-hrrm-895h-xh34"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27263?format=json","purl":"pkg:pypi/rdiffweb@2.4.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10"}],"aliases":["CVE-2022-3389","GHSA-hrrm-895h-xh34","PYSEC-2022-302"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-r9uw-4hx9-rka1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174923?format=json","vulnerability_id":"VCID-s4sy-ab6h-b3gq","summary":"Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43000.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43000.yaml"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/6efb995bc32c8a8e9ad755eb813dec991dffb2b8","reference_id":"6efb995bc32c8a8e9ad755eb813dec991dffb2b8","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-30T17:48:18Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/6efb995bc32c8a8e9ad755eb813dec991dffb2b8"},{"reference_url":"https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1","reference_id":"ca428c31-858d-47fa-adc9-2a59f8e8b2b1","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-30T17:48:18Z/"}],"url":"https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3362","reference_id":"CVE-2022-3362","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3362"},{"reference_url":"https://github.com/advisories/GHSA-94qm-99qc-qwqj","reference_id":"GHSA-94qm-99qc-qwqj","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-94qm-99qc-qwqj"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27265?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3362","GHSA-94qm-99qc-qwqj","PYSEC-2022-43000"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-s4sy-ab6h-b3gq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/211316?format=json","vulnerability_id":"VCID-sqdy-e2sm-vfbv","summary":"rdiffweb contains Weak Password Requirements","references":[{"reference_url":"https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-272.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-272.yaml"},{"reference_url":"https://huntr.dev/bounties/58eae29e-3619-449d-9bba-fdcbabcba5fe","reference_id":"","reference_type":"","scores":[],"url":"https://huntr.dev/bounties/58eae29e-3619-449d-9bba-fdcbabcba5fe"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3179","reference_id":"CVE-2022-3179","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3179"},{"reference_url":"https://github.com/advisories/GHSA-mp5p-g2jv-r8qw","reference_id":"GHSA-mp5p-g2jv-r8qw","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-mp5p-g2jv-r8qw"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26174?format=json","purl":"pkg:pypi/rdiffweb@2.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-1m9h-vrvu-abb8"},{"vulnerability":"VCID-1sm3-y4rz-33ef"},{"vulnerability":"VCID-22gc-9xf5-hqdq"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-7tka-pn6b-jbb2"},{"vulnerability":"VCID-99fm-uh18-sfed"},{"vulnerability":"VCID-9u3k-3p83-p3ab"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-d7ed-wxmn-1uak"},{"vulnerability":"VCID-dy7w-yh68-wyej"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-fdqp-6av7-bfb3"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r5k3-8ezc-9uad"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-tbz3-msw6-87cs"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"},{"vulnerability":"VCID-zp3a-ty3v-p7es"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2"}],"aliases":["CVE-2022-3179","GHSA-mp5p-g2jv-r8qw","PYSEC-2022-272"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-sqdy-e2sm-vfbv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/168923?format=json","vulnerability_id":"VCID-suj2-f63d-syan","summary":"Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.","references":[{"reference_url":"https://github.com/advisories/GHSA-g594-55mp-f6q8","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-g594-55mp-f6q8"},{"reference_url":"https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8","reference_id":"b2dc504d-92ae-4221-a096-12ff223d95a8","reference_type":"","scores":[{"value":"6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T17:42:41Z/"}],"url":"https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b2df3679564d0daa2856213bb307d3e34bd89a25","reference_id":"b2df3679564d0daa2856213bb307d3e34bd89a25","reference_type":"","scores":[{"value":"6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T17:42:41Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/b2df3679564d0daa2856213bb307d3e34bd89a25"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/72695?format=json","purl":"pkg:pypi/rdiffweb@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.2"}],"aliases":["CVE-2022-4314","GHSA-g594-55mp-f6q8","PYSEC-2022-43002"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-suj2-f63d-syan"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174795?format=json","vulnerability_id":"VCID-tbz3-msw6-87cs","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-284.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-284.yaml"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314","reference_id":"20fc0d304412cc569b21f31e52cb8b94094d6314","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-23T20:21:36Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314"},{"reference_url":"https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2","reference_id":"7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-23T20:21:36Z/"}],"url":"https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3267","reference_id":"CVE-2022-3267","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3267"},{"reference_url":"https://github.com/advisories/GHSA-74j6-3hh4-w3f5","reference_id":"GHSA-74j6-3hh4-w3f5","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-74j6-3hh4-w3f5"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26928?format=json","purl":"pkg:pypi/rdiffweb@2.4.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-1m9h-vrvu-abb8"},{"vulnerability":"VCID-1sm3-y4rz-33ef"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-7tka-pn6b-jbb2"},{"vulnerability":"VCID-99fm-uh18-sfed"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-d7ed-wxmn-1uak"},{"vulnerability":"VCID-dy7w-yh68-wyej"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r5k3-8ezc-9uad"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6"}],"aliases":["CVE-2022-3267","GHSA-74j6-3hh4-w3f5","PYSEC-2022-284"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tbz3-msw6-87cs"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174715?format=json","vulnerability_id":"VCID-ujpu-b99m-ffc4","summary":"Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43159.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43159.yaml"},{"reference_url":"https://huntr.dev/bounties/37b86c45-b240-4626-bd53-b6f02d10e0d7","reference_id":"37b86c45-b240-4626-bd53-b6f02d10e0d7","reference_type":"","scores":[{"value":"4.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-14T15:36:25Z/"}],"url":"https://huntr.dev/bounties/37b86c45-b240-4626-bd53-b6f02d10e0d7"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311","reference_id":"b78ec09f4582e363f6f449df6f987127e126c311","reference_type":"","scores":[{"value":"4.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H"},{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-14T15:36:25Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3439","reference_id":"CVE-2022-3439","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3439"},{"reference_url":"https://github.com/advisories/GHSA-x8x2-wc2h-wc48","reference_id":"GHSA-x8x2-wc2h-wc48","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-x8x2-wc2h-wc48"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27265?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3439","GHSA-x8x2-wc2h-wc48","PYSEC-2022-43159"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ujpu-b99m-ffc4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/168669?format=json","vulnerability_id":"VCID-w75b-cyzd-3ucz","summary":"Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.","references":[{"reference_url":"https://github.com/advisories/GHSA-wf33-6x33-wcf9","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-wf33-6x33-wcf9"},{"reference_url":"https://huntr.dev/bounties/c62126dc-d9a6-4d3e-988d-967031876c58","reference_id":"c62126dc-d9a6-4d3e-988d-967031876c58","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:46:39Z/"}],"url":"https://huntr.dev/bounties/c62126dc-d9a6-4d3e-988d-967031876c58"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/d1aaa96b665a39fba9e98d6054a9de511ba0a837","reference_id":"d1aaa96b665a39fba9e98d6054a9de511ba0a837","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:46:39Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/d1aaa96b665a39fba9e98d6054a9de511ba0a837"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/73451?format=json","purl":"pkg:pypi/rdiffweb@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-cwte-w97m-f3gd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5"}],"aliases":["CVE-2022-4722","GHSA-wf33-6x33-wcf9","PYSEC-2022-43008"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-w75b-cyzd-3ucz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/168753?format=json","vulnerability_id":"VCID-x21q-enbg-xyfm","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.","references":[{"reference_url":"https://github.com/advisories/GHSA-85fp-523q-5xwc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-85fp-523q-5xwc"},{"reference_url":"https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10","reference_id":"17bc1b0f-1f5c-432f-88e4-c9866ccf6e10","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T18:19:10Z/"}],"url":"https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398","reference_id":"e6f0d8002129be90fe82fa3e3ea0a6942caba398","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T18:19:10Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/72801?format=json","purl":"pkg:pypi/rdiffweb@2.5.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-w75b-cyzd-3ucz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.4"}],"aliases":["CVE-2022-4646","GHSA-85fp-523q-5xwc","PYSEC-2022-43004"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-x21q-enbg-xyfm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/175039?format=json","vulnerability_id":"VCID-ze97-pshj-auce","summary":"Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42977.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42977.yaml"},{"reference_url":"https://gitlab.com/ikus-soft/rdiffweb#next-release-250","reference_id":"","reference_type":"","scores":[],"url":"https://gitlab.com/ikus-soft/rdiffweb#next-release-250"},{"reference_url":"https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1","reference_id":"02207c8f-2b15-4a31-a86a-74fd2fca0ed1","reference_type":"","scores":[{"value":"4.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-09T14:18:37Z/"}],"url":"https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3327","reference_id":"CVE-2022-3327","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3327"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095","reference_id":"f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095","reference_type":"","scores":[{"value":"4.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-09T14:18:37Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095"},{"reference_url":"https://github.com/advisories/GHSA-99j5-fvg3-54pm","reference_id":"GHSA-99j5-fvg3-54pm","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-99j5-fvg3-54pm"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27263?format=json","purl":"pkg:pypi/rdiffweb@2.4.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10"},{"url":"http://public2.vulnerablecode.io/api/packages/27265?format=json","purl":"pkg:pypi/rdiffweb@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0"}],"aliases":["CVE-2022-3327","GHSA-99j5-fvg3-54pm","PYSEC-2022-42977"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ze97-pshj-auce"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/174791?format=json","vulnerability_id":"VCID-zp3a-ty3v-p7es","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-285.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-285.yaml"},{"reference_url":"https://github.com/ikus060/rdiffweb/commit/18a5aabd48fa6d2d2771a25f95610c28a1a097ca","reference_id":"18a5aabd48fa6d2d2771a25f95610c28a1a097ca","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-23T20:32:28Z/"}],"url":"https://github.com/ikus060/rdiffweb/commit/18a5aabd48fa6d2d2771a25f95610c28a1a097ca"},{"reference_url":"https://huntr.dev/bounties/5ec206e0-eca0-4957-9af4-fdd9185d1db3","reference_id":"5ec206e0-eca0-4957-9af4-fdd9185d1db3","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-23T20:32:28Z/"}],"url":"https://huntr.dev/bounties/5ec206e0-eca0-4957-9af4-fdd9185d1db3"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3233","reference_id":"CVE-2022-3233","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3233"},{"reference_url":"https://github.com/advisories/GHSA-9vxf-mcm6-5m42","reference_id":"GHSA-9vxf-mcm6-5m42","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-9vxf-mcm6-5m42"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26928?format=json","purl":"pkg:pypi/rdiffweb@2.4.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1jq8-v6r3-m3c1"},{"vulnerability":"VCID-1m9h-vrvu-abb8"},{"vulnerability":"VCID-1sm3-y4rz-33ef"},{"vulnerability":"VCID-2eka-zuqa-fqaw"},{"vulnerability":"VCID-2nka-f5cw-7kbh"},{"vulnerability":"VCID-3hr2-bzjs-v7ae"},{"vulnerability":"VCID-4b33-2gjf-pqaz"},{"vulnerability":"VCID-548j-5gva-qqe6"},{"vulnerability":"VCID-7tka-pn6b-jbb2"},{"vulnerability":"VCID-99fm-uh18-sfed"},{"vulnerability":"VCID-aqp5-z8th-7ubn"},{"vulnerability":"VCID-atc1-2w9t-43d6"},{"vulnerability":"VCID-c8a3-sja5-h3fa"},{"vulnerability":"VCID-cv8a-cfqn-nfd4"},{"vulnerability":"VCID-cwte-w97m-f3gd"},{"vulnerability":"VCID-d3u8-9d5e-6uh8"},{"vulnerability":"VCID-d7ed-wxmn-1uak"},{"vulnerability":"VCID-dy7w-yh68-wyej"},{"vulnerability":"VCID-euj6-ja79-u3et"},{"vulnerability":"VCID-m2ag-9yup-6ydg"},{"vulnerability":"VCID-m4hv-bujs-kue6"},{"vulnerability":"VCID-mnzk-q4ua-3fbx"},{"vulnerability":"VCID-neep-wzcy-8qd3"},{"vulnerability":"VCID-p9hw-jxf8-7bc9"},{"vulnerability":"VCID-r5k3-8ezc-9uad"},{"vulnerability":"VCID-r9uw-4hx9-rka1"},{"vulnerability":"VCID-s4sy-ab6h-b3gq"},{"vulnerability":"VCID-suj2-f63d-syan"},{"vulnerability":"VCID-ujpu-b99m-ffc4"},{"vulnerability":"VCID-w75b-cyzd-3ucz"},{"vulnerability":"VCID-x21q-enbg-xyfm"},{"vulnerability":"VCID-ze97-pshj-auce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6"}],"aliases":["CVE-2022-3233","GHSA-9vxf-mcm6-5m42","PYSEC-2022-285"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zp3a-ty3v-p7es"}],"fixing_vulnerabilities":[],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@1.3.1b2"}