Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/aimeos/ai-client-html@2023.07.6
Typecomposer
Namespaceaimeos
Nameai-client-html
Version2023.07.6
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2023.10.15
Latest_non_vulnerable_version2024.04.7
Affected_by_vulnerabilities
0
url VCID-6dsu-621x-gqh3
vulnerability_id VCID-6dsu-621x-gqh3
summary ai-client-html is an Aimeos e-commerce HTML client component. Debug information revealed sensitive information from environment variables in error log. This issue has been patched in versions 2024.04.7, 2023.10.15, 2022.10.13 and 2021.10.22.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-38516
reference_id
reference_type
scores
0
value 0.00293
scoring_system epss
scoring_elements 0.5315
published_at 2026-06-14T12:55:00Z
1
value 0.00293
scoring_system epss
scoring_elements 0.53166
published_at 2026-06-13T12:55:00Z
2
value 0.00293
scoring_system epss
scoring_elements 0.53023
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-38516
1
reference_url https://github.com/aimeos/ai-client-html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/aimeos/ai-client-html
2
reference_url https://github.com/aimeos/ai-client-html/commit/bb389620ffc3cf4a2f29c11a1e5f512049e0c132
reference_id bb389620ffc3cf4a2f29c11a1e5f512049e0c132
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T15:31:50Z/
url https://github.com/aimeos/ai-client-html/commit/bb389620ffc3cf4a2f29c11a1e5f512049e0c132
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-38516
reference_id CVE-2024-38516
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-38516
4
reference_url https://github.com/advisories/GHSA-ppm5-jv84-2xg2
reference_id GHSA-ppm5-jv84-2xg2
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-ppm5-jv84-2xg2
5
reference_url https://github.com/aimeos/ai-client-html/security/advisories/GHSA-ppm5-jv84-2xg2
reference_id GHSA-ppm5-jv84-2xg2
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T15:31:50Z/
url https://github.com/aimeos/ai-client-html/security/advisories/GHSA-ppm5-jv84-2xg2
fixed_packages
0
url pkg:composer/aimeos/ai-client-html@2023.10.15
purl pkg:composer/aimeos/ai-client-html@2023.10.15
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/aimeos/ai-client-html@2023.10.15
1
url pkg:composer/aimeos/ai-client-html@2024.04.7
purl pkg:composer/aimeos/ai-client-html@2024.04.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/aimeos/ai-client-html@2024.04.7
2
url pkg:composer/aimeos/ai-client-html@2024.4.7
purl pkg:composer/aimeos/ai-client-html@2024.4.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/aimeos/ai-client-html@2024.4.7
aliases CVE-2024-38516, GHSA-ppm5-jv84-2xg2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6dsu-621x-gqh3
1
url VCID-rzv2-caqz-e3dz
vulnerability_id VCID-rzv2-caqz-e3dz
summary The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5, digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment didn't succeed. Versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5 fix this issue.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-37296
reference_id
reference_type
scores
0
value 0.00278
scoring_system epss
scoring_elements 0.51718
published_at 2026-06-12T12:55:00Z
1
value 0.00278
scoring_system epss
scoring_elements 0.5173
published_at 2026-06-13T12:55:00Z
2
value 0.00278
scoring_system epss
scoring_elements 0.51588
published_at 2026-06-11T12:55:00Z
3
value 0.00278
scoring_system epss
scoring_elements 0.51715
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-37296
1
reference_url https://github.com/aimeos/ai-client-html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/aimeos/ai-client-html
2
reference_url https://github.com/aimeos/ai-client-html/commit/12d8aad1a373bf9d350872501adec3e222164f83
reference_id 12d8aad1a373bf9d350872501adec3e222164f83
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-11T18:47:05Z/
url https://github.com/aimeos/ai-client-html/commit/12d8aad1a373bf9d350872501adec3e222164f83
3
reference_url https://github.com/aimeos/ai-client-html/commit/5a7249769142b3ce70959ab1fb70c7e7c251e214
reference_id 5a7249769142b3ce70959ab1fb70c7e7c251e214
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-11T18:47:05Z/
url https://github.com/aimeos/ai-client-html/commit/5a7249769142b3ce70959ab1fb70c7e7c251e214
4
reference_url https://github.com/aimeos/ai-client-html/commit/6460ffe8f4929d864164aa96c5b49eca5326d975
reference_id 6460ffe8f4929d864164aa96c5b49eca5326d975
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-11T18:47:05Z/
url https://github.com/aimeos/ai-client-html/commit/6460ffe8f4929d864164aa96c5b49eca5326d975
5
reference_url https://github.com/aimeos/ai-client-html/commit/7f01d2f4fbc67f5231fd84adeb835d28252b8409
reference_id 7f01d2f4fbc67f5231fd84adeb835d28252b8409
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-11T18:47:05Z/
url https://github.com/aimeos/ai-client-html/commit/7f01d2f4fbc67f5231fd84adeb835d28252b8409
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-37296
reference_id CVE-2024-37296
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-37296
7
reference_url https://github.com/aimeos/ai-client-html/commit/fc611ff9a57e421d0ad9d99346b561cea515c5f0
reference_id fc611ff9a57e421d0ad9d99346b561cea515c5f0
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-11T18:47:05Z/
url https://github.com/aimeos/ai-client-html/commit/fc611ff9a57e421d0ad9d99346b561cea515c5f0
8
reference_url https://github.com/advisories/GHSA-v4g2-cm5v-cxv7
reference_id GHSA-v4g2-cm5v-cxv7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v4g2-cm5v-cxv7
9
reference_url https://github.com/aimeos/ai-client-html/security/advisories/GHSA-v4g2-cm5v-cxv7
reference_id GHSA-v4g2-cm5v-cxv7
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-11T18:47:05Z/
url https://github.com/aimeos/ai-client-html/security/advisories/GHSA-v4g2-cm5v-cxv7
fixed_packages
0
url pkg:composer/aimeos/ai-client-html@2023.10.14
purl pkg:composer/aimeos/ai-client-html@2023.10.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6dsu-621x-gqh3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/aimeos/ai-client-html@2023.10.14
1
url pkg:composer/aimeos/ai-client-html@2024.04.5
purl pkg:composer/aimeos/ai-client-html@2024.04.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6dsu-621x-gqh3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/aimeos/ai-client-html@2024.04.5
2
url pkg:composer/aimeos/ai-client-html@2024.4.5
purl pkg:composer/aimeos/ai-client-html@2024.4.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/aimeos/ai-client-html@2024.4.5
aliases CVE-2024-37296, GHSA-v4g2-cm5v-cxv7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rzv2-caqz-e3dz
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/aimeos/ai-client-html@2023.07.6