{"url":"http://public2.vulnerablecode.io/api/packages/77408?format=json","purl":"pkg:composer/drupal/core@8.7.4","type":"composer","namespace":"drupal","name":"core","version":"8.7.4","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"10.4.9","latest_non_vulnerable_version":"11.3.7","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/57030?format=json","vulnerability_id":"VCID-2c5f-q858-huaw","summary":"Drupal Core Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability\nImproperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-31674","reference_id":"","reference_type":"","scores":[{"value":"0.00314","scoring_system":"epss","scoring_elements":"0.54855","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00314","scoring_system":"epss","scoring_elements":"0.5484","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00314","scoring_system":"epss","scoring_elements":"0.54859","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00314","scoring_system":"epss","scoring_elements":"0.54866","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-31674"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"4.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://www.drupal.org/sa-core-2025-003","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"4.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-03T17:16:59Z/"}],"url":"https://www.drupal.org/sa-core-2025-003"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31674","reference_id":"CVE-2025-31674","reference_type":"","scores":[{"value":"4.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31674"},{"reference_url":"https://github.com/advisories/GHSA-2qph-q8xw-gv7q","reference_id":"GHSA-2qph-q8xw-gv7q","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-2qph-q8xw-gv7q"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/84655?format=json","purl":"pkg:composer/drupal/core@10.3.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.3.13"},{"url":"http://public2.vulnerablecode.io/api/packages/84656?format=json","purl":"pkg:composer/drupal/core@10.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.4.3"},{"url":"http://public2.vulnerablecode.io/api/packages/84657?format=json","purl":"pkg:composer/drupal/core@11.0.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.0.12"},{"url":"http://public2.vulnerablecode.io/api/packages/84658?format=json","purl":"pkg:composer/drupal/core@11.1.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.1.3"}],"aliases":["CVE-2025-31674","GHSA-2qph-q8xw-gv7q"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2c5f-q858-huaw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5227?format=json","vulnerability_id":"VCID-2fas-m6vh-myhc","summary":"multiple issues","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13677","reference_id":"","reference_type":"","scores":[{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.41829","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.41766","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.418","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.41744","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.4182","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13677"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/drupal/core/commit/7a9bef4b4750d79ab42498e459012cabe4c4bd8b","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/7a9bef4b4750d79ab42498e459012cabe4c4bd8b"},{"reference_url":"https://www.drupal.org/sa-core-2021-010","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2021-010"},{"reference_url":"https://security.archlinux.org/AVG-2407","reference_id":"AVG-2407","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2407"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13677","reference_id":"CVE-2020-13677","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13677"},{"reference_url":"https://github.com/advisories/GHSA-3xr3-phjp-g6p2","reference_id":"GHSA-3xr3-phjp-g6p2","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-3xr3-phjp-g6p2"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/60653?format=json","purl":"pkg:composer/drupal/core@8.9.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.9.19"},{"url":"http://public2.vulnerablecode.io/api/packages/60639?format=json","purl":"pkg:composer/drupal/core@9.1.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.1.13"},{"url":"http://public2.vulnerablecode.io/api/packages/60640?format=json","purl":"pkg:composer/drupal/core@9.2.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2g67-a42m-qfbh"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5nbj-5x5a-93hz"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-ydy1-x277-1fhj"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.2.6"}],"aliases":["CVE-2020-13677","GHSA-3xr3-phjp-g6p2"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2fas-m6vh-myhc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5228?format=json","vulnerability_id":"VCID-2t34-82p3-73c3","summary":"multiple issues","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13676","reference_id":"","reference_type":"","scores":[{"value":"0.00285","scoring_system":"epss","scoring_elements":"0.52142","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00285","scoring_system":"epss","scoring_elements":"0.52091","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00285","scoring_system":"epss","scoring_elements":"0.52122","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00285","scoring_system":"epss","scoring_elements":"0.52072","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00285","scoring_system":"epss","scoring_elements":"0.52133","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13676"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/drupal/core/commit/8e8e3d2ddd72471ba886346ecabfb5d98fd27d9b","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/8e8e3d2ddd72471ba886346ecabfb5d98fd27d9b"},{"reference_url":"https://www.drupal.org/sa-core-2021-009","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2021-009"},{"reference_url":"https://security.archlinux.org/AVG-2407","reference_id":"AVG-2407","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2407"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13676","reference_id":"CVE-2020-13676","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13676"},{"reference_url":"https://github.com/advisories/GHSA-qfhg-m6r8-xxpj","reference_id":"GHSA-qfhg-m6r8-xxpj","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-qfhg-m6r8-xxpj"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/60653?format=json","purl":"pkg:composer/drupal/core@8.9.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.9.19"},{"url":"http://public2.vulnerablecode.io/api/packages/60639?format=json","purl":"pkg:composer/drupal/core@9.1.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.1.13"},{"url":"http://public2.vulnerablecode.io/api/packages/60640?format=json","purl":"pkg:composer/drupal/core@9.2.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2g67-a42m-qfbh"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5nbj-5x5a-93hz"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-ydy1-x277-1fhj"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.2.6"}],"aliases":["CVE-2020-13676","GHSA-qfhg-m6r8-xxpj"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2t34-82p3-73c3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/42389?format=json","vulnerability_id":"VCID-31qy-vagp-83b6","summary":"Exposure of Resource to Wrong Sphere\nInformation Disclosure vulnerability in file module of Drupal Core allows an attacker to gain access to the file metadata of a permanent private file that they do not have access to by guessing the ID of the file. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13670","reference_id":"","reference_type":"","scores":[{"value":"0.00427","scoring_system":"epss","scoring_elements":"0.62662","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00427","scoring_system":"epss","scoring_elements":"0.62691","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00427","scoring_system":"epss","scoring_elements":"0.62716","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00427","scoring_system":"epss","scoring_elements":"0.62706","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13670"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/drupal/core/commit/f93a37b713b59f8d24e826bc74378099853eef3d","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/f93a37b713b59f8d24e826bc74378099853eef3d"},{"reference_url":"https://www.drupal.org/sa-core-2020-011","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2020-011"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13670","reference_id":"CVE-2020-13670","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13670"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2020-13670.yaml","reference_id":"CVE-2020-13670.YAML","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2020-13670.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2020-13670.yaml","reference_id":"CVE-2020-13670.YAML","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2020-13670.yaml"},{"reference_url":"https://github.com/advisories/GHSA-mmjr-5q74-p3m4","reference_id":"GHSA-mmjr-5q74-p3m4","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-mmjr-5q74-p3m4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/60658?format=json","purl":"pkg:composer/drupal/core@8.8.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.10"},{"url":"http://public2.vulnerablecode.io/api/packages/60651?format=json","purl":"pkg:composer/drupal/core@8.9.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-67da-qxh5-aydx"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.9.6"},{"url":"http://public2.vulnerablecode.io/api/packages/60652?format=json","purl":"pkg:composer/drupal/core@9.0.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-67da-qxh5-aydx"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.0.6"}],"aliases":["CVE-2020-13670","GHSA-mmjr-5q74-p3m4"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-31qy-vagp-83b6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/54891?format=json","vulnerability_id":"VCID-3pj1-y73r-vyhh","summary":"Drupal core unrestricted file upload\nDrupal 8 core's file_save_upload() function does not strip the leading and trailing dot ('.') from filenames, like Drupal 7 did.\n\nUsers with the ability to upload files with any extension in conjunction with contributed modules may be able to use this to upload system files such as .htaccess in order to bypass protections afforded by Drupal's default .htaccess file.\n\nAfter this fix, file_save_upload() now trims leading and trailing dots from filenames.","references":[{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"6.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2019-12-18-2.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2019-12-18-2.yaml"},{"reference_url":"https://www.drupal.org/sa-core-2019-010","reference_id":"","reference_type":"","scores":[{"value":"6.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2019-010"},{"reference_url":"https://github.com/advisories/GHSA-7gwj-7fhm-vw4w","reference_id":"GHSA-7gwj-7fhm-vw4w","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-7gwj-7fhm-vw4w"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/81347?format=json","purl":"pkg:composer/drupal/core@8.7.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6s93-1cpz-yyg8"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jed8-4cv5-6bcr"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tp81-dw6e-9qah"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vjrr-h9sh-3bcu"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.7.11"},{"url":"http://public2.vulnerablecode.io/api/packages/81348?format=json","purl":"pkg:composer/drupal/core@8.8.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6s93-1cpz-yyg8"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-9rmk-e8zd-9bcw"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jed8-4cv5-6bcr"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-phwu-rdm2-ufhr"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-sg4r-hncm-dqcq"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tp81-dw6e-9qah"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vjrr-h9sh-3bcu"},{"vulnerability":"VCID-vz31-7246-aken"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-x783-ggg8-auck"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"},{"vulnerability":"VCID-zr84-4jzv-2fd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.1"}],"aliases":["GHSA-7gwj-7fhm-vw4w"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3pj1-y73r-vyhh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/45051?format=json","vulnerability_id":"VCID-3xk4-qwaq-5yaj","summary":"Improper Access Control\nUnder certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user being able to alter data they should not have access to. No forms provided by Drupal core are known to be vulnerable. However, forms added through contributed or custom modules or themes may be affected.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-25278","reference_id":"","reference_type":"","scores":[{"value":"0.00479","scoring_system":"epss","scoring_elements":"0.65441","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00479","scoring_system":"epss","scoring_elements":"0.65429","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00479","scoring_system":"epss","scoring_elements":"0.6544","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00479","scoring_system":"epss","scoring_elements":"0.6539","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00479","scoring_system":"epss","scoring_elements":"0.65452","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-25278"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://www.drupal.org/sa-core-2022-013","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-03T18:39:47Z/"}],"url":"https://www.drupal.org/sa-core-2022-013"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25278","reference_id":"CVE-2022-25278","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25278"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2022-25278.yaml","reference_id":"CVE-2022-25278.YAML","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2022-25278.yaml"},{"reference_url":"https://github.com/advisories/GHSA-cfh2-7f6h-3m85","reference_id":"GHSA-cfh2-7f6h-3m85","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-cfh2-7f6h-3m85"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/64975?format=json","purl":"pkg:composer/drupal/core@9.3.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.3.19"},{"url":"http://public2.vulnerablecode.io/api/packages/64976?format=json","purl":"pkg:composer/drupal/core@9.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.4.3"}],"aliases":["CVE-2022-25278","GHSA-cfh2-7f6h-3m85"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3xk4-qwaq-5yaj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/55745?format=json","vulnerability_id":"VCID-4p4c-7rdc-37fa","summary":"Drupal Full Path Disclosure\n`core/authorize.php` in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of `hash_salt` is `file_get_contents` of a file that does not exist.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2024-45440","reference_id":"","reference_type":"","scores":[{"value":"0.86689","scoring_system":"epss","scoring_elements":"0.9944","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-45440"},{"reference_url":"https://github.com/drupal/drupal","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/drupal"},{"reference_url":"https://github.com/github/advisory-database/pull/4827","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/github/advisory-database/pull/4827"},{"reference_url":"https://www.drupal.org/project/drupal/issues/3457781","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T13:18:23Z/"}],"url":"https://www.drupal.org/project/drupal/issues/3457781"},{"reference_url":"https://www.drupal.org/project/drupal/releases/10.2.9","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/project/drupal/releases/10.2.9"},{"reference_url":"https://www.drupal.org/project/drupal/releases/10.3.6","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/project/drupal/releases/10.3.6"},{"reference_url":"https://www.drupal.org/project/drupal/releases/11.0.5","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/project/drupal/releases/11.0.5"},{"reference_url":"https://www.exploit-db.com/exploits/52266","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.exploit-db.com/exploits/52266"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/52266.py","reference_id":"CVE-2024-45440","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/52266.py"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45440","reference_id":"CVE-2024-45440","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45440"},{"reference_url":"https://senscybersecurity.nl/CVE-2024-45440-Explained/","reference_id":"CVE-2024-45440-Explained","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T13:18:23Z/"}],"url":"https://senscybersecurity.nl/CVE-2024-45440-Explained/"},{"reference_url":"https://senscybersecurity.nl/CVE-2024-45440-Explained","reference_id":"CVE-2024-45440-EXPLAINED","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://senscybersecurity.nl/CVE-2024-45440-Explained"},{"reference_url":"https://github.com/advisories/GHSA-mg8j-w93w-xjgc","reference_id":"GHSA-mg8j-w93w-xjgc","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-mg8j-w93w-xjgc"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/82503?format=json","purl":"pkg:composer/drupal/core@10.2.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jyz4-ymrp-pka7"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.2.9"},{"url":"http://public2.vulnerablecode.io/api/packages/758479?format=json","purl":"pkg:composer/drupal/core@10.3.0-beta1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.3.0-beta1"},{"url":"http://public2.vulnerablecode.io/api/packages/82501?format=json","purl":"pkg:composer/drupal/core@10.3.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.3.6"},{"url":"http://public2.vulnerablecode.io/api/packages/758482?format=json","purl":"pkg:composer/drupal/core@11.0.0-alpha1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.0.0-alpha1"},{"url":"http://public2.vulnerablecode.io/api/packages/82502?format=json","purl":"pkg:composer/drupal/core@11.0.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.0.5"}],"aliases":["CVE-2024-45440","GHSA-mg8j-w93w-xjgc"],"risk_score":10.0,"exploitability":"2.0","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4p4c-7rdc-37fa"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/54822?format=json","vulnerability_id":"VCID-4q59-j6u4-qfhk","summary":"Drupal core Access bypass\nThe Media Library module has a security vulnerability whereby it doesn't sufficiently restrict access to media items in certain configurations.\n\nSolution:\nIf you are using Drupal 8.7.x, you should upgrade to Drupal 8.7.11.\nIf you are using Drupal 8.8.x, you should upgrade to Drupal 8.8.1.\nVersions of Drupal 8 prior to 8.7.x are end-of-life and do not receive security coverage.\n\nAlternatively, you may mitigate this vulnerability by unchecking the \"Enable advanced UI\" checkbox on `/admin/config/media/media-library`. (This mitigation is not available in 8.7.x.)","references":[{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2019-12-18-3.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2019-12-18-3.yaml"},{"reference_url":"https://www.drupal.org/sa-core-2019-011","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2019-011"},{"reference_url":"https://github.com/advisories/GHSA-mh4h-27gq-cxwj","reference_id":"GHSA-mh4h-27gq-cxwj","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-mh4h-27gq-cxwj"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/81347?format=json","purl":"pkg:composer/drupal/core@8.7.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6s93-1cpz-yyg8"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jed8-4cv5-6bcr"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tp81-dw6e-9qah"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vjrr-h9sh-3bcu"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.7.11"},{"url":"http://public2.vulnerablecode.io/api/packages/81348?format=json","purl":"pkg:composer/drupal/core@8.8.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6s93-1cpz-yyg8"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-9rmk-e8zd-9bcw"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jed8-4cv5-6bcr"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-phwu-rdm2-ufhr"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-sg4r-hncm-dqcq"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tp81-dw6e-9qah"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vjrr-h9sh-3bcu"},{"vulnerability":"VCID-vz31-7246-aken"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-x783-ggg8-auck"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"},{"vulnerability":"VCID-zr84-4jzv-2fd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.1"}],"aliases":["GHSA-mh4h-27gq-cxwj"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4q59-j6u4-qfhk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46109?format=json","vulnerability_id":"VCID-54qh-fz2a-cyh6","summary":"Generation of Error Message Containing Sensitive Information\nIn certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation.\n\nThis vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API.\n\nThe core REST and contributed GraphQL modules are not affected.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-5256","reference_id":"","reference_type":"","scores":[{"value":"0.01295","scoring_system":"epss","scoring_elements":"0.80058","published_at":"2026-06-05T12:55:00Z"},{"value":"0.01295","scoring_system":"epss","scoring_elements":"0.80046","published_at":"2026-06-08T12:55:00Z"},{"value":"0.01295","scoring_system":"epss","scoring_elements":"0.80056","published_at":"2026-06-07T12:55:00Z"},{"value":"0.01295","scoring_system":"epss","scoring_elements":"0.80062","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-5256"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/drupal/core/commit/1cd2741c2b43f6ad1bdfc121b8d9ec3b87e70742","reference_id":"","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/1cd2741c2b43f6ad1bdfc121b8d9ec3b87e70742"},{"reference_url":"https://github.com/drupal/core/commit/5495dc530e3acd056478245bfe1828210c6da7dc","reference_id":"","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/5495dc530e3acd056478245bfe1828210c6da7dc"},{"reference_url":"https://github.com/drupal/core/commit/d4fe67562ee3ea0d9ecb9672d2945d94c5633d24","reference_id":"","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/d4fe67562ee3ea0d9ecb9672d2945d94c5633d24"},{"reference_url":"https://www.drupal.org/sa-core-2023-006","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-23T18:22:43Z/"}],"url":"https://www.drupal.org/sa-core-2023-006"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5256","reference_id":"CVE-2023-5256","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5256"},{"reference_url":"https://github.com/advisories/GHSA-rjqg-3h9m-fx5x","reference_id":"GHSA-rjqg-3h9m-fx5x","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-rjqg-3h9m-fx5x"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/67144?format=json","purl":"pkg:composer/drupal/core@9.5.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.5.11"},{"url":"http://public2.vulnerablecode.io/api/packages/67145?format=json","purl":"pkg:composer/drupal/core@10.0.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jyz4-ymrp-pka7"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.0.11"},{"url":"http://public2.vulnerablecode.io/api/packages/67146?format=json","purl":"pkg:composer/drupal/core@10.1.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-84g5-ckkq-hygm"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jyz4-ymrp-pka7"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.1.4"}],"aliases":["CVE-2023-5256","GHSA-rjqg-3h9m-fx5x"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-54qh-fz2a-cyh6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/53806?format=json","vulnerability_id":"VCID-5jy9-mhbb-nuh7","summary":"Deserialization of Untrusted Data\nArchive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28948.json","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28948.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-28948","reference_id":"","reference_type":"","scores":[{"value":"0.76873","scoring_system":"epss","scoring_elements":"0.98976","published_at":"2026-06-08T12:55:00Z"},{"value":"0.76873","scoring_system":"epss","scoring_elements":"0.98977","published_at":"2026-06-07T12:55:00Z"},{"value":"0.76873","scoring_system":"epss","scoring_elements":"0.98975","published_at":"2026-06-04T12:55:00Z"},{"value":"0.76873","scoring_system":"epss","scoring_elements":"0.98978","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-28948"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28948","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28948"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28949","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28949"},{"reference_url":"https://github.com/pear/Archive_Tar","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pear/Archive_Tar"},{"reference_url":"https://github.com/pear/Archive_Tar/commit/0670a05fdab997036a3fc3ef113b8f5922e574da","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pear/Archive_Tar/commit/0670a05fdab997036a3fc3ef113b8f5922e574da"},{"reference_url":"https://github.com/pear/Archive_Tar/issues/33","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pear/Archive_Tar/issues/33"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/11/msg00045.html","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2020/11/msg00045.html"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4V35LBRM6HBCXBVCITKQ4UEBTXO2EG7B","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4V35LBRM6HBCXBVCITKQ4UEBTXO2EG7B"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4V35LBRM6HBCXBVCITKQ4UEBTXO2EG7B/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4V35LBRM6HBCXBVCITKQ4UEBTXO2EG7B/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NBYZSHYTIOBK6V7C4N7TP6KIKCRKLVWP","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NBYZSHYTIOBK6V7C4N7TP6KIKCRKLVWP"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NBYZSHYTIOBK6V7C4N7TP6KIKCRKLVWP/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NBYZSHYTIOBK6V7C4N7TP6KIKCRKLVWP/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VJQQYDAOWHD6RDITDRPHFW7WY6BS3V5N","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VJQQYDAOWHD6RDITDRPHFW7WY6BS3V5N"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VJQQYDAOWHD6RDITDRPHFW7WY6BS3V5N/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VJQQYDAOWHD6RDITDRPHFW7WY6BS3V5N/"},{"reference_url":"https://security.gentoo.org/glsa/202101-23","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.gentoo.org/glsa/202101-23"},{"reference_url":"https://www.debian.org/security/2020/dsa-4817","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2020/dsa-4817"},{"reference_url":"https://www.drupal.org/sa-core-2020-013","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2020-013"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1904001","reference_id":"1904001","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1904001"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976108","reference_id":"976108","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976108"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28948","reference_id":"CVE-2020-28948","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28948"},{"reference_url":"https://github.com/advisories/GHSA-jh5x-hfhg-78jq","reference_id":"GHSA-jh5x-hfhg-78jq","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-jh5x-hfhg-78jq"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6541","reference_id":"RHSA-2022:6541","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6541"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6542","reference_id":"RHSA-2022:6542","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6542"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:7340","reference_id":"RHSA-2022:7340","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:7340"},{"reference_url":"https://usn.ubuntu.com/4654-1/","reference_id":"USN-4654-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4654-1/"},{"reference_url":"https://usn.ubuntu.com/6981-1/","reference_id":"USN-6981-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6981-1/"},{"reference_url":"https://usn.ubuntu.com/6981-2/","reference_id":"USN-6981-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6981-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/79181?format=json","purl":"pkg:composer/drupal/core@8.9.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-67da-qxh5-aydx"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.9.10"},{"url":"http://public2.vulnerablecode.io/api/packages/249831?format=json","purl":"pkg:composer/drupal/core@9.0.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.0.0-alpha1"},{"url":"http://public2.vulnerablecode.io/api/packages/79182?format=json","purl":"pkg:composer/drupal/core@9.0.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-67da-qxh5-aydx"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.0.9"},{"url":"http://public2.vulnerablecode.io/api/packages/280810?format=json","purl":"pkg:composer/drupal/core@9.1.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.1.0-alpha1"}],"aliases":["CVE-2020-28948","GHSA-jh5x-hfhg-78jq"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5jy9-mhbb-nuh7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/54842?format=json","vulnerability_id":"VCID-67w7-gq9f-ukf1","summary":"Drupal core Denial of Service\nA visit to install.php can cause cached data to become corrupted. This could cause a site to be impaired until caches are rebuilt.","references":[{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2019-12-18-1.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2019-12-18-1.yaml"},{"reference_url":"https://www.drupal.org/sa-core-2019-009","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2019-009"},{"reference_url":"https://github.com/advisories/GHSA-pr99-c33p-fwf6","reference_id":"GHSA-pr99-c33p-fwf6","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-pr99-c33p-fwf6"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/81347?format=json","purl":"pkg:composer/drupal/core@8.7.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6s93-1cpz-yyg8"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jed8-4cv5-6bcr"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tp81-dw6e-9qah"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vjrr-h9sh-3bcu"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.7.11"},{"url":"http://public2.vulnerablecode.io/api/packages/81348?format=json","purl":"pkg:composer/drupal/core@8.8.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6s93-1cpz-yyg8"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-9rmk-e8zd-9bcw"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jed8-4cv5-6bcr"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-phwu-rdm2-ufhr"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-sg4r-hncm-dqcq"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tp81-dw6e-9qah"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vjrr-h9sh-3bcu"},{"vulnerability":"VCID-vz31-7246-aken"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-x783-ggg8-auck"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"},{"vulnerability":"VCID-zr84-4jzv-2fd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.1"}],"aliases":["GHSA-pr99-c33p-fwf6"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-67w7-gq9f-ukf1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/54814?format=json","vulnerability_id":"VCID-6s93-1cpz-yyg8","summary":"Drupal core uses a vulnerable Third-party library CKEditor\nThe Drupal project uses the third-party library [CKEditor](https://github.com/ckeditor/ckeditor4), which has released a [security improvement](https://ckeditor.com/blog/CKEditor-4.14-with-Paste-from-LibreOffice-released/#security-issues-fixed) that is needed to protect some Drupal configurations.\n\nVulnerabilities are possible if Drupal is configured to use the WYSIWYG CKEditor for your site's users. An attacker that can create or edit content may be able to exploit this Cross Site Scripting (XSS) vulnerability to target users with access to the WYSIWYG CKEditor, and this may include site admins with privileged access.\n\nThe latest versions of Drupal update CKEditor to 4.14 to mitigate the vulnerabilities.","references":[{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2020-03-18.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2020-03-18.yaml"},{"reference_url":"https://www.drupal.org/sa-core-2020-001","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2020-001"},{"reference_url":"https://github.com/advisories/GHSA-v273-j5hq-26xp","reference_id":"GHSA-v273-j5hq-26xp","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-v273-j5hq-26xp"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/76830?format=json","purl":"pkg:composer/drupal/core@8.7.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jed8-4cv5-6bcr"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vjrr-h9sh-3bcu"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.7.12"},{"url":"http://public2.vulnerablecode.io/api/packages/76831?format=json","purl":"pkg:composer/drupal/core@8.8.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-9rmk-e8zd-9bcw"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jed8-4cv5-6bcr"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-phwu-rdm2-ufhr"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-sg4r-hncm-dqcq"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vjrr-h9sh-3bcu"},{"vulnerability":"VCID-vz31-7246-aken"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-x783-ggg8-auck"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"},{"vulnerability":"VCID-zr84-4jzv-2fd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.4"}],"aliases":["GHSA-v273-j5hq-26xp"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6s93-1cpz-yyg8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/52643?format=json","vulnerability_id":"VCID-7ned-rdx5-fyc3","summary":"Improper Access Control\nAn access bypass vulnerability exists when the experimental Workspaces module. This can be mitigated by disabling the Workspaces module.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2019-6342","reference_id":"","reference_type":"","scores":[{"value":"0.002","scoring_system":"epss","scoring_elements":"0.41996","published_at":"2026-06-04T12:55:00Z"},{"value":"0.002","scoring_system":"epss","scoring_elements":"0.4207","published_at":"2026-06-05T12:55:00Z"},{"value":"0.002","scoring_system":"epss","scoring_elements":"0.42081","published_at":"2026-06-06T12:55:00Z"},{"value":"0.002","scoring_system":"epss","scoring_elements":"0.42053","published_at":"2026-06-07T12:55:00Z"},{"value":"0.002","scoring_system":"epss","scoring_elements":"0.42018","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2019-6342"},{"reference_url":"https://github.com/drupal/core/commit/bac9bde22bb545ff72570d8a46055c6c6e70e7c5","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/drupal/core/commit/bac9bde22bb545ff72570d8a46055c6c6e70e7c5"},{"reference_url":"https://www.drupal.org/sa-core-2019-008","reference_id":"","reference_type":"","scores":[],"url":"https://www.drupal.org/sa-core-2019-008"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6342","reference_id":"CVE-2019-6342","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6342"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2019-6342.yaml","reference_id":"CVE-2019-6342.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2019-6342.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2019-6342.yaml","reference_id":"CVE-2019-6342.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2019-6342.yaml"},{"reference_url":"https://github.com/advisories/GHSA-xq62-62c9-22mg","reference_id":"GHSA-xq62-62c9-22mg","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-xq62-62c9-22mg"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/77409?format=json","purl":"pkg:composer/drupal/core@8.7.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3pj1-y73r-vyhh"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-4q59-j6u4-qfhk"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-67w7-gq9f-ukf1"},{"vulnerability":"VCID-6s93-1cpz-yyg8"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-ckvk-xm4a-2qey"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jed8-4cv5-6bcr"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tp81-dw6e-9qah"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vjrr-h9sh-3bcu"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.7.5"}],"aliases":["CVE-2019-6342","GHSA-xq62-62c9-22mg"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7ned-rdx5-fyc3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5230?format=json","vulnerability_id":"VCID-7v89-2sss-hfaz","summary":"multiple issues","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13674","reference_id":"","reference_type":"","scores":[{"value":"0.0014","scoring_system":"epss","scoring_elements":"0.33948","published_at":"2026-06-06T12:55:00Z"},{"value":"0.0014","scoring_system":"epss","scoring_elements":"0.3383","published_at":"2026-06-04T12:55:00Z"},{"value":"0.0014","scoring_system":"epss","scoring_elements":"0.3388","published_at":"2026-06-08T12:55:00Z"},{"value":"0.0014","scoring_system":"epss","scoring_elements":"0.33914","published_at":"2026-06-07T12:55:00Z"},{"value":"0.0014","scoring_system":"epss","scoring_elements":"0.33934","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13674"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/drupal/core/commit/20cd85db8198c63101bd050ea973b13f2f3edef6","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/20cd85db8198c63101bd050ea973b13f2f3edef6"},{"reference_url":"https://github.com/drupal/core/commit/6359b3ea5aacf85399285c522c6d787a218c897c","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/6359b3ea5aacf85399285c522c6d787a218c897c"},{"reference_url":"https://github.com/drupal/core/commit/801910fcdfc14ee6120051089a2129e455186ad8","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/801910fcdfc14ee6120051089a2129e455186ad8"},{"reference_url":"https://www.drupal.org/sa-core-2021-007","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2021-007"},{"reference_url":"https://security.archlinux.org/AVG-2407","reference_id":"AVG-2407","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2407"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13674","reference_id":"CVE-2020-13674","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13674"},{"reference_url":"https://github.com/advisories/GHSA-j586-cj67-vg4p","reference_id":"GHSA-j586-cj67-vg4p","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-j586-cj67-vg4p"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/60653?format=json","purl":"pkg:composer/drupal/core@8.9.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.9.19"},{"url":"http://public2.vulnerablecode.io/api/packages/60639?format=json","purl":"pkg:composer/drupal/core@9.1.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.1.13"},{"url":"http://public2.vulnerablecode.io/api/packages/60640?format=json","purl":"pkg:composer/drupal/core@9.2.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2g67-a42m-qfbh"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5nbj-5x5a-93hz"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-ydy1-x277-1fhj"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.2.6"}],"aliases":["CVE-2020-13674","GHSA-j586-cj67-vg4p"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7v89-2sss-hfaz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/48406?format=json","vulnerability_id":"VCID-a3s2-c4k2-4ufn","summary":"Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8, from 7.0 before 7.103.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-13083","reference_id":"","reference_type":"","scores":[{"value":"0.00011","scoring_system":"epss","scoring_elements":"0.01492","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00011","scoring_system":"epss","scoring_elements":"0.01486","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00011","scoring_system":"epss","scoring_elements":"0.01495","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00011","scoring_system":"epss","scoring_elements":"0.01484","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-13083"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"1.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://www.drupal.org/sa-core-2025-008","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"1.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-11-18T20:31:33Z/"}],"url":"https://www.drupal.org/sa-core-2025-008"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13083","reference_id":"CVE-2025-13083","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"1.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13083"},{"reference_url":"https://github.com/advisories/GHSA-mhpg-hpj5-73r2","reference_id":"GHSA-mhpg-hpj5-73r2","reference_type":"","scores":[{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-mhpg-hpj5-73r2"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/71441?format=json","purl":"pkg:composer/drupal/core@10.4.9","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.4.9"},{"url":"http://public2.vulnerablecode.io/api/packages/71442?format=json","purl":"pkg:composer/drupal/core@10.5.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.5.6"},{"url":"http://public2.vulnerablecode.io/api/packages/71443?format=json","purl":"pkg:composer/drupal/core@11.1.9","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.1.9"},{"url":"http://public2.vulnerablecode.io/api/packages/71444?format=json","purl":"pkg:composer/drupal/core@11.2.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.2.8"}],"aliases":["CVE-2025-13083","GHSA-mhpg-hpj5-73r2"],"risk_score":1.6,"exploitability":"0.5","weighted_severity":"3.3","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-a3s2-c4k2-4ufn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/45048?format=json","vulnerability_id":"VCID-a7ss-tkb6-gkge","summary":"Improper access control\nIn some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system. Access to a non-public file is checked only if it is stored in the \"private\" file system. However, some contributed modules provide additional file systems, or schemes, which may lead to this vulnerability. This vulnerability is mitigated by the fact that it only applies when the site sets (Drupal 9) $config['image.settings']['allow_insecure_derivatives'] or (Drupal 7) $conf['image_allow_insecure_derivatives'] to TRUE. The recommended and default setting is FALSE, and Drupal core does not provide a way to change that in the admin UI. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing files or image styles after updating.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-25275","reference_id":"","reference_type":"","scores":[{"value":"0.00579","scoring_system":"epss","scoring_elements":"0.69284","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00579","scoring_system":"epss","scoring_elements":"0.69293","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00579","scoring_system":"epss","scoring_elements":"0.69285","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00579","scoring_system":"epss","scoring_elements":"0.69268","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00579","scoring_system":"epss","scoring_elements":"0.69245","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-25275"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/drupal/core/commit/2d5f47fc8a166115f56c2330a81e83abe22445cf","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/2d5f47fc8a166115f56c2330a81e83abe22445cf"},{"reference_url":"https://github.com/drupal/core/commit/e2fbf63700819cb470a1be425798f1a3f2020116","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/e2fbf63700819cb470a1be425798f1a3f2020116"},{"reference_url":"https://www.drupal.org/sa-core-2022-012","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-03T18:45:46Z/"}],"url":"https://www.drupal.org/sa-core-2022-012"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25275","reference_id":"CVE-2022-25275","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25275"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2022-25275.yaml","reference_id":"CVE-2022-25275.YAML","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2022-25275.yaml"},{"reference_url":"https://github.com/advisories/GHSA-xh3v-6f9j-wxw3","reference_id":"GHSA-xh3v-6f9j-wxw3","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-xh3v-6f9j-wxw3"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/64975?format=json","purl":"pkg:composer/drupal/core@9.3.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.3.19"},{"url":"http://public2.vulnerablecode.io/api/packages/64976?format=json","purl":"pkg:composer/drupal/core@9.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.4.3"}],"aliases":["CVE-2022-25275","GHSA-xh3v-6f9j-wxw3","GMS-2022-3362"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-a7ss-tkb6-gkge"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/42761?format=json","vulnerability_id":"VCID-ard5-3cjv-1beu","summary":"Improper Input Validation\nguzzlehttp/psr7 is a PSR-7 HTTP message library used in drupal. Versions prior to 1.8.4 and 2.1.1 is vulnerable to improper header parsing. An attacker could sneak in a new line character and pass untrusted values.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-24775","reference_id":"","reference_type":"","scores":[{"value":"0.00931","scoring_system":"epss","scoring_elements":"0.76504","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00931","scoring_system":"epss","scoring_elements":"0.76518","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00931","scoring_system":"epss","scoring_elements":"0.76524","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00931","scoring_system":"epss","scoring_elements":"0.76489","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00931","scoring_system":"epss","scoring_elements":"0.76514","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-24775"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24775","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24775"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/psr7/CVE-2022-24775.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/psr7/CVE-2022-24775.yaml"},{"reference_url":"https://github.com/guzzle/psr7","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/guzzle/psr7"},{"reference_url":"https://github.com/guzzle/psr7/pull/485/commits/e55afaa3fc138c89adf3b55a8ba20dc60d17f1f1","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:56:31Z/"}],"url":"https://github.com/guzzle/psr7/pull/485/commits/e55afaa3fc138c89adf3b55a8ba20dc60d17f1f1"},{"reference_url":"https://github.com/guzzle/psr7/pull/486/commits/9a96d9db668b485361ed9de7b5bf1e54895df1dc","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:56:31Z/"}],"url":"https://github.com/guzzle/psr7/pull/486/commits/9a96d9db668b485361ed9de7b5bf1e54895df1dc"},{"reference_url":"https://www.drupal.org/sa-core-2022-006","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:56:31Z/"}],"url":"https://www.drupal.org/sa-core-2022-006"},{"reference_url":"https://www.rfc-editor.org/rfc/rfc7230#section-3.2.4","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.rfc-editor.org/rfc/rfc7230#section-3.2.4"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1008236","reference_id":"1008236","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1008236"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24775","reference_id":"CVE-2022-24775","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24775"},{"reference_url":"https://github.com/advisories/GHSA-q7rv-6hp3-vh96","reference_id":"GHSA-q7rv-6hp3-vh96","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-q7rv-6hp3-vh96"},{"reference_url":"https://github.com/guzzle/psr7/security/advisories/GHSA-q7rv-6hp3-vh96","reference_id":"GHSA-q7rv-6hp3-vh96","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:56:31Z/"}],"url":"https://github.com/guzzle/psr7/security/advisories/GHSA-q7rv-6hp3-vh96"},{"reference_url":"https://usn.ubuntu.com/6670-1/","reference_id":"USN-6670-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6670-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/61057?format=json","purl":"pkg:composer/drupal/core@9.2.16","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5nbj-5x5a-93hz"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.2.16"},{"url":"http://public2.vulnerablecode.io/api/packages/563477?format=json","purl":"pkg:composer/drupal/core@9.3.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.3.0-alpha1"},{"url":"http://public2.vulnerablecode.io/api/packages/61058?format=json","purl":"pkg:composer/drupal/core@9.3.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5nbj-5x5a-93hz"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-g1ew-tnk9-cuh7"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.3.9"},{"url":"http://public2.vulnerablecode.io/api/packages/563480?format=json","purl":"pkg:composer/drupal/core@10.0.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.0.0-alpha1"}],"aliases":["CVE-2022-24775","GHSA-q7rv-6hp3-vh96"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ard5-3cjv-1beu"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/42386?format=json","vulnerability_id":"VCID-avmn-kqky-83dd","summary":"Drupal core Cross-site Scripting (XSS) vulnerability in ckeditor\nCross-site Scripting (XSS) vulnerability in ckeditor of Drupal Core allows attacker to inject XSS. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10.; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13669","reference_id":"","reference_type":"","scores":[{"value":"0.00204","scoring_system":"epss","scoring_elements":"0.42408","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00204","scoring_system":"epss","scoring_elements":"0.42435","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00204","scoring_system":"epss","scoring_elements":"0.42424","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00204","scoring_system":"epss","scoring_elements":"0.42374","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00204","scoring_system":"epss","scoring_elements":"0.42349","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13669"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://www.drupal.org/sa-core-2020-010","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2020-010"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13669","reference_id":"CVE-2020-13669","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13669"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2020-13669.yaml","reference_id":"CVE-2020-13669.YAML","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2020-13669.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2020-13669.yaml","reference_id":"CVE-2020-13669.YAML","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2020-13669.yaml"},{"reference_url":"https://github.com/advisories/GHSA-c533-c843-67h8","reference_id":"GHSA-c533-c843-67h8","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-c533-c843-67h8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/60658?format=json","purl":"pkg:composer/drupal/core@8.8.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.10"},{"url":"http://public2.vulnerablecode.io/api/packages/60651?format=json","purl":"pkg:composer/drupal/core@8.9.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-67da-qxh5-aydx"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.9.6"},{"url":"http://public2.vulnerablecode.io/api/packages/60652?format=json","purl":"pkg:composer/drupal/core@9.0.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-67da-qxh5-aydx"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.0.6"}],"aliases":["CVE-2020-13669","GHSA-c533-c843-67h8"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-avmn-kqky-83dd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/57024?format=json","vulnerability_id":"VCID-b8fw-ya7y-h7d8","summary":"Drupal Core Potential Cross-Site Scripting (XSS) via Error Messages\nImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-3057","reference_id":"","reference_type":"","scores":[{"value":"0.00406","scoring_system":"epss","scoring_elements":"0.61443","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00406","scoring_system":"epss","scoring_elements":"0.61419","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00406","scoring_system":"epss","scoring_elements":"0.61436","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00406","scoring_system":"epss","scoring_elements":"0.6145","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-3057"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://www.drupal.org/sa-core-2025-001","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-01T13:26:50Z/"}],"url":"https://www.drupal.org/sa-core-2025-001"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3057","reference_id":"CVE-2025-3057","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3057"},{"reference_url":"https://github.com/advisories/GHSA-39g6-x4x8-5jcm","reference_id":"GHSA-39g6-x4x8-5jcm","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-39g6-x4x8-5jcm"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/84655?format=json","purl":"pkg:composer/drupal/core@10.3.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.3.13"},{"url":"http://public2.vulnerablecode.io/api/packages/84656?format=json","purl":"pkg:composer/drupal/core@10.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.4.3"},{"url":"http://public2.vulnerablecode.io/api/packages/84657?format=json","purl":"pkg:composer/drupal/core@11.0.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.0.12"},{"url":"http://public2.vulnerablecode.io/api/packages/84658?format=json","purl":"pkg:composer/drupal/core@11.1.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.1.3"}],"aliases":["CVE-2025-3057","GHSA-39g6-x4x8-5jcm"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-b8fw-ya7y-h7d8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/54878?format=json","vulnerability_id":"VCID-ckvk-xm4a-2qey","summary":"Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar\nThe Drupal project uses the third-party library [Archive_Tar](https://pear.php.net/package/Archive_Tar/), which has released a security improvement that is needed to protect some Drupal configurations.\n\nMultiple vulnerabilities are possible if Drupal is configured to allow .tar, .tar.gz, .bz2 or .tlz file uploads and processes them.\n\nThe latest versions of Drupal update Archive_Tar to 1.4.9 to mitigate the file processing vulnerabilities.","references":[{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2019-12-18-4.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2019-12-18-4.yaml"},{"reference_url":"https://www.drupal.org/sa-core-2019-012","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2019-012"},{"reference_url":"https://github.com/advisories/GHSA-98h9-727m-44qv","reference_id":"GHSA-98h9-727m-44qv","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-98h9-727m-44qv"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/81347?format=json","purl":"pkg:composer/drupal/core@8.7.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6s93-1cpz-yyg8"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jed8-4cv5-6bcr"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tp81-dw6e-9qah"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vjrr-h9sh-3bcu"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.7.11"},{"url":"http://public2.vulnerablecode.io/api/packages/81348?format=json","purl":"pkg:composer/drupal/core@8.8.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6s93-1cpz-yyg8"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-9rmk-e8zd-9bcw"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jed8-4cv5-6bcr"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-phwu-rdm2-ufhr"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-sg4r-hncm-dqcq"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tp81-dw6e-9qah"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vjrr-h9sh-3bcu"},{"vulnerability":"VCID-vz31-7246-aken"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-x783-ggg8-auck"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"},{"vulnerability":"VCID-zr84-4jzv-2fd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.1"}],"aliases":["GHSA-98h9-727m-44qv"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ckvk-xm4a-2qey"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5229?format=json","vulnerability_id":"VCID-dav9-pgdh-8yey","summary":"multiple issues","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13675","reference_id":"","reference_type":"","scores":[{"value":"0.00797","scoring_system":"epss","scoring_elements":"0.74383","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00797","scoring_system":"epss","scoring_elements":"0.74358","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00797","scoring_system":"epss","scoring_elements":"0.74376","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00797","scoring_system":"epss","scoring_elements":"0.7435","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00797","scoring_system":"epss","scoring_elements":"0.74388","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13675"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://www.drupal.org/sa-core-2021-008","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2021-008"},{"reference_url":"https://security.archlinux.org/AVG-2407","reference_id":"AVG-2407","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2407"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13675","reference_id":"CVE-2020-13675","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13675"},{"reference_url":"https://github.com/advisories/GHSA-v8wr-r69p-mmwx","reference_id":"GHSA-v8wr-r69p-mmwx","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-v8wr-r69p-mmwx"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/60653?format=json","purl":"pkg:composer/drupal/core@8.9.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.9.19"},{"url":"http://public2.vulnerablecode.io/api/packages/60639?format=json","purl":"pkg:composer/drupal/core@9.1.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.1.13"},{"url":"http://public2.vulnerablecode.io/api/packages/60640?format=json","purl":"pkg:composer/drupal/core@9.2.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2g67-a42m-qfbh"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5nbj-5x5a-93hz"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-ydy1-x277-1fhj"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.2.6"}],"aliases":["CVE-2020-13675","GHSA-v8wr-r69p-mmwx"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dav9-pgdh-8yey"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/57017?format=json","vulnerability_id":"VCID-deks-ns51-nbdg","summary":"Drupal Core Vulnerable to Forceful Browsing\nIncorrect Authorization vulnerability in Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-31673","reference_id":"","reference_type":"","scores":[{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32323","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00133","scoring_system":"epss","scoring_elements":"0.32353","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.3855","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00173","scoring_system":"epss","scoring_elements":"0.38552","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-31673"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://www.drupal.org/sa-core-2025-002","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-29T15:47:04Z/"}],"url":"https://www.drupal.org/sa-core-2025-002"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31673","reference_id":"CVE-2025-31673","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31673"},{"reference_url":"https://github.com/advisories/GHSA-wpp8-fjgf-pwc7","reference_id":"GHSA-wpp8-fjgf-pwc7","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-wpp8-fjgf-pwc7"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/84655?format=json","purl":"pkg:composer/drupal/core@10.3.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.3.13"},{"url":"http://public2.vulnerablecode.io/api/packages/84656?format=json","purl":"pkg:composer/drupal/core@10.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.4.3"},{"url":"http://public2.vulnerablecode.io/api/packages/84657?format=json","purl":"pkg:composer/drupal/core@11.0.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.0.12"},{"url":"http://public2.vulnerablecode.io/api/packages/84658?format=json","purl":"pkg:composer/drupal/core@11.1.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.1.3"}],"aliases":["CVE-2025-31673","GHSA-wpp8-fjgf-pwc7"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-deks-ns51-nbdg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/45050?format=json","vulnerability_id":"VCID-dyhz-g3nv-yuc3","summary":"Lack of domain validation in Druple core\nThe Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed in the context of the primary domain. Under certain circumstances, this could lead to cross-site scripting, leaked cookies, or other vulnerabilities.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-25276","reference_id":"","reference_type":"","scores":[{"value":"0.01831","scoring_system":"epss","scoring_elements":"0.83273","published_at":"2026-06-08T12:55:00Z"},{"value":"0.01831","scoring_system":"epss","scoring_elements":"0.83257","published_at":"2026-06-04T12:55:00Z"},{"value":"0.01831","scoring_system":"epss","scoring_elements":"0.83283","published_at":"2026-06-05T12:55:00Z"},{"value":"0.01831","scoring_system":"epss","scoring_elements":"0.83285","published_at":"2026-06-06T12:55:00Z"},{"value":"0.01831","scoring_system":"epss","scoring_elements":"0.8328","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-25276"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://www.drupal.org/sa-core-2022-015","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2022-015"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25276","reference_id":"CVE-2022-25276","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25276"},{"reference_url":"https://github.com/advisories/GHSA-4wfq-jc9h-vpcx","reference_id":"GHSA-4wfq-jc9h-vpcx","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-4wfq-jc9h-vpcx"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/64975?format=json","purl":"pkg:composer/drupal/core@9.3.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.3.19"},{"url":"http://public2.vulnerablecode.io/api/packages/64976?format=json","purl":"pkg:composer/drupal/core@9.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.4.3"}],"aliases":["CVE-2022-25276","GHSA-4wfq-jc9h-vpcx"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dyhz-g3nv-yuc3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/45057?format=json","vulnerability_id":"VCID-egtv-y9w1-skgr","summary":"Improper Input Validation\nDrupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter critical or sensitive data.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-25273","reference_id":"","reference_type":"","scores":[{"value":"0.0047","scoring_system":"epss","scoring_elements":"0.64942","published_at":"2026-06-08T12:55:00Z"},{"value":"0.0047","scoring_system":"epss","scoring_elements":"0.64912","published_at":"2026-06-04T12:55:00Z"},{"value":"0.0047","scoring_system":"epss","scoring_elements":"0.64955","published_at":"2026-06-05T12:55:00Z"},{"value":"0.0047","scoring_system":"epss","scoring_elements":"0.64965","published_at":"2026-06-06T12:55:00Z"},{"value":"0.0047","scoring_system":"epss","scoring_elements":"0.64953","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-25273"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://www.drupal.org/sa-core-2022-008","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-03T19:19:11Z/"}],"url":"https://www.drupal.org/sa-core-2022-008"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25273","reference_id":"CVE-2022-25273","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25273"},{"reference_url":"https://github.com/advisories/GHSA-g36h-4jr6-qmm9","reference_id":"GHSA-g36h-4jr6-qmm9","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-g36h-4jr6-qmm9"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/64994?format=json","purl":"pkg:composer/drupal/core@9.2.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5nbj-5x5a-93hz"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.2.18"},{"url":"http://public2.vulnerablecode.io/api/packages/64995?format=json","purl":"pkg:composer/drupal/core@9.3.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5nbj-5x5a-93hz"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.3.12"}],"aliases":["CVE-2022-25273","GHSA-g36h-4jr6-qmm9"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-egtv-y9w1-skgr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/57018?format=json","vulnerability_id":"VCID-hay8-hvsq-33bm","summary":"Drupal Core Cross-Site Scripting (XSS) Vulnerability\nImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).This issue affects Drupal core: from 8.0.0 before 10.3.14, from 10.4.0 before 10.4.5, from 11.0.0 before 11.0.13, from 11.1.0 before 11.1.5.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-31675","reference_id":"","reference_type":"","scores":[{"value":"0.00088","scoring_system":"epss","scoring_elements":"0.25208","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00088","scoring_system":"epss","scoring_elements":"0.25223","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00153","scoring_system":"epss","scoring_elements":"0.35669","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00153","scoring_system":"epss","scoring_elements":"0.35711","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-31675"},{"reference_url":"https://d7es.tag1.com/security-advisories/link-moderately-critical-cross-site-scripting-sa-core-2025-004","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"1.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-01T18:21:31Z/"}],"url":"https://d7es.tag1.com/security-advisories/link-moderately-critical-cross-site-scripting-sa-core-2025-004"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"1.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://www.drupal.org/sa-core-2025-004","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"1.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-01T18:21:31Z/"}],"url":"https://www.drupal.org/sa-core-2025-004"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31675","reference_id":"CVE-2025-31675","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"1.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31675"},{"reference_url":"https://www.herodevs.com/vulnerability-directory/cve-2025-31675","reference_id":"CVE-2025-31675","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"1.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-01T18:21:31Z/"}],"url":"https://www.herodevs.com/vulnerability-directory/cve-2025-31675"},{"reference_url":"https://github.com/advisories/GHSA-m4wj-hhwj-47qp","reference_id":"GHSA-m4wj-hhwj-47qp","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-m4wj-hhwj-47qp"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/84659?format=json","purl":"pkg:composer/drupal/core@10.3.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.3.14"},{"url":"http://public2.vulnerablecode.io/api/packages/84660?format=json","purl":"pkg:composer/drupal/core@10.4.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.4.5"},{"url":"http://public2.vulnerablecode.io/api/packages/84661?format=json","purl":"pkg:composer/drupal/core@11.0.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.0.13"},{"url":"http://public2.vulnerablecode.io/api/packages/84662?format=json","purl":"pkg:composer/drupal/core@11.1.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.1.5"}],"aliases":["CVE-2025-31675","GHSA-m4wj-hhwj-47qp"],"risk_score":2.5,"exploitability":"0.5","weighted_severity":"4.9","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-hay8-hvsq-33bm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/97953?format=json","vulnerability_id":"VCID-hkch-a5yn-jyg1","summary":"Twig is a template language for PHP. Versions 1.x prior to 1.44.7, 2.x prior to 2.15.3, and 3.x prior to 3.4.3 encounter an issue when the filesystem loader loads templates for which the name is a user input. It is possible to use the `source` or `include` statement to read arbitrary files from outside the templates' directory when using a namespace like `@somewhere/../some.file`. In such a case, validation is bypassed. Versions 1.44.7, 2.15.3, and 3.4.3 contain a fix for validation of such template names. There are no known workarounds aside from upgrading.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-39261","reference_id":"","reference_type":"","scores":[{"value":"0.09505","scoring_system":"epss","scoring_elements":"0.92989","published_at":"2026-06-04T12:55:00Z"},{"value":"0.09505","scoring_system":"epss","scoring_elements":"0.9299","published_at":"2026-06-08T12:55:00Z"},{"value":"0.09505","scoring_system":"epss","scoring_elements":"0.92992","published_at":"2026-06-07T12:55:00Z"},{"value":"0.09505","scoring_system":"epss","scoring_elements":"0.92996","published_at":"2026-06-06T12:55:00Z"},{"value":"0.09505","scoring_system":"epss","scoring_elements":"0.93","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-39261"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39261","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39261"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2022-39261.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2022-39261.yaml"},{"reference_url":"https://github.com/twigphp/Twig","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/twigphp/Twig"},{"reference_url":"https://github.com/twigphp/Twig/commit/35f3035c5deb0041da7b84daf02dea074ddc7a0b","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:50:56Z/"}],"url":"https://github.com/twigphp/Twig/commit/35f3035c5deb0041da7b84daf02dea074ddc7a0b"},{"reference_url":"https://github.com/twigphp/Twig/security/advisories/GHSA-52m2-vc4m-jj33","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:50:56Z/"}],"url":"https://github.com/twigphp/Twig/security/advisories/GHSA-52m2-vc4m-jj33"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00016.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:50:56Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00016.html"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2OKRUHPVLIQVFPPJ2UWC3WV3WQO763NR","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2OKRUHPVLIQVFPPJ2UWC3WV3WQO763NR"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2OKRUHPVLIQVFPPJ2UWC3WV3WQO763NR/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2OKRUHPVLIQVFPPJ2UWC3WV3WQO763NR/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AUVTXMNPSZAHS3DWZEM56V5W4NPVR6L7","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AUVTXMNPSZAHS3DWZEM56V5W4NPVR6L7"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AUVTXMNPSZAHS3DWZEM56V5W4NPVR6L7/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AUVTXMNPSZAHS3DWZEM56V5W4NPVR6L7/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWRFPZSR74SYVJKBTKTMYUK36IJ3SQJP","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWRFPZSR74SYVJKBTKTMYUK36IJ3SQJP"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWRFPZSR74SYVJKBTKTMYUK36IJ3SQJP/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWRFPZSR74SYVJKBTKTMYUK36IJ3SQJP/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TW53TFJ6WWNXMUHOFACKATJTS7NIHVQE","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TW53TFJ6WWNXMUHOFACKATJTS7NIHVQE"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TW53TFJ6WWNXMUHOFACKATJTS7NIHVQE/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TW53TFJ6WWNXMUHOFACKATJTS7NIHVQE/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WV5TNNJLGG536TJH6DLCIAAZZIPV2GUD","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WV5TNNJLGG536TJH6DLCIAAZZIPV2GUD"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WV5TNNJLGG536TJH6DLCIAAZZIPV2GUD/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WV5TNNJLGG536TJH6DLCIAAZZIPV2GUD/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YU4ZYX62H2NUAKKGUES4RZIM4KMTKZ7F","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YU4ZYX62H2NUAKKGUES4RZIM4KMTKZ7F"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YU4ZYX62H2NUAKKGUES4RZIM4KMTKZ7F/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YU4ZYX62H2NUAKKGUES4RZIM4KMTKZ7F/"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39261","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39261"},{"reference_url":"https://symfony.com/blog/twig-security-release-possibility-to-load-a-template-outside-a-configured-directory-when-using-the-filesystem-loader","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://symfony.com/blog/twig-security-release-possibility-to-load-a-template-outside-a-configured-directory-when-using-the-filesystem-loader"},{"reference_url":"https://www.debian.org/security/2022/dsa-5248","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:50:56Z/"}],"url":"https://www.debian.org/security/2022/dsa-5248"},{"reference_url":"https://www.drupal.org/sa-core-2022-016","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:50:56Z/"}],"url":"https://www.drupal.org/sa-core-2022-016"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1020991","reference_id":"1020991","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1020991"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OKRUHPVLIQVFPPJ2UWC3WV3WQO763NR/","reference_id":"2OKRUHPVLIQVFPPJ2UWC3WV3WQO763NR","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:50:56Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OKRUHPVLIQVFPPJ2UWC3WV3WQO763NR/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUVTXMNPSZAHS3DWZEM56V5W4NPVR6L7/","reference_id":"AUVTXMNPSZAHS3DWZEM56V5W4NPVR6L7","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:50:56Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUVTXMNPSZAHS3DWZEM56V5W4NPVR6L7/"},{"reference_url":"https://github.com/advisories/GHSA-52m2-vc4m-jj33","reference_id":"GHSA-52m2-vc4m-jj33","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-52m2-vc4m-jj33"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NWRFPZSR74SYVJKBTKTMYUK36IJ3SQJP/","reference_id":"NWRFPZSR74SYVJKBTKTMYUK36IJ3SQJP","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:50:56Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NWRFPZSR74SYVJKBTKTMYUK36IJ3SQJP/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TW53TFJ6WWNXMUHOFACKATJTS7NIHVQE/","reference_id":"TW53TFJ6WWNXMUHOFACKATJTS7NIHVQE","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:50:56Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TW53TFJ6WWNXMUHOFACKATJTS7NIHVQE/"},{"reference_url":"https://usn.ubuntu.com/5947-1/","reference_id":"USN-5947-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5947-1/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WV5TNNJLGG536TJH6DLCIAAZZIPV2GUD/","reference_id":"WV5TNNJLGG536TJH6DLCIAAZZIPV2GUD","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:50:56Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WV5TNNJLGG536TJH6DLCIAAZZIPV2GUD/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YU4ZYX62H2NUAKKGUES4RZIM4KMTKZ7F/","reference_id":"YU4ZYX62H2NUAKKGUES4RZIM4KMTKZ7F","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:50:56Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YU4ZYX62H2NUAKKGUES4RZIM4KMTKZ7F/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/504477?format=json","purl":"pkg:composer/drupal/core@9.3.22","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.3.22"},{"url":"http://public2.vulnerablecode.io/api/packages/587748?format=json","purl":"pkg:composer/drupal/core@9.4.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.4.0-alpha1"},{"url":"http://public2.vulnerablecode.io/api/packages/504478?format=json","purl":"pkg:composer/drupal/core@9.4.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.4.7"},{"url":"http://public2.vulnerablecode.io/api/packages/612181?format=json","purl":"pkg:composer/drupal/core@9.5.0-beta1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.5.0-beta1"}],"aliases":["CVE-2022-39261","GHSA-52m2-vc4m-jj33"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-hkch-a5yn-jyg1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/56330?format=json","vulnerability_id":"VCID-j7bj-atys-qfg3","summary":"Drupal core Access bypass\nDrupal's uniqueness checking for certain user fields is inconsistent depending on the database engine and its collation. As a result, a user may be able to register with the same email address as another user. This may lead to data integrity issues. This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2024-55634","reference_id":"","reference_type":"","scores":[{"value":"0.01148","scoring_system":"epss","scoring_elements":"0.78827","published_at":"2026-06-08T12:55:00Z"},{"value":"0.01148","scoring_system":"epss","scoring_elements":"0.78838","published_at":"2026-06-07T12:55:00Z"},{"value":"0.01148","scoring_system":"epss","scoring_elements":"0.78847","published_at":"2026-06-06T12:55:00Z"},{"value":"0.01148","scoring_system":"epss","scoring_elements":"0.7884","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-55634"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/drupal/core/commit/7ae0e8f1824e15f8b2b06e4da09836250e85e934","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/7ae0e8f1824e15f8b2b06e4da09836250e85e934"},{"reference_url":"https://www.drupal.org/sa-core-2024-004","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-12-11T16:38:29Z/"}],"url":"https://www.drupal.org/sa-core-2024-004"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-55634","reference_id":"CVE-2024-55634","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-55634"},{"reference_url":"https://github.com/advisories/GHSA-7cwc-fjqm-8vh8","reference_id":"GHSA-7cwc-fjqm-8vh8","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-7cwc-fjqm-8vh8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/83500?format=json","purl":"pkg:composer/drupal/core@10.2.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.2.11"},{"url":"http://public2.vulnerablecode.io/api/packages/83501?format=json","purl":"pkg:composer/drupal/core@10.3.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.3.9"},{"url":"http://public2.vulnerablecode.io/api/packages/83502?format=json","purl":"pkg:composer/drupal/core@11.0.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.0.8"}],"aliases":["CVE-2024-55634","GHSA-7cwc-fjqm-8vh8"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-j7bj-atys-qfg3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/51650?format=json","vulnerability_id":"VCID-jed8-4cv5-6bcr","summary":"Potential XSS vulnerability in jQuery\n### Impact\nPassing HTML from untrusted sources - even after sanitizing it - to\none of jQuery's DOM manipulation methods (i.e. `.html()`, `.append()`,\nand others) may execute untrusted code.\n\n### Patches\nThis problem is patched in jQuery 3.5.0.\n\n### Workarounds\nTo workaround the issue without upgrading, adding the following to\nyour code:\n```js\njQuery.htmlPrefilter = function( html ) {\n  return html;\n};\n```\nYou need to use at least jQuery 1.12/2.2 or newer to be able to\napply this workaround.\n\n### References\nhttps://blog.jquery.com/2020/04/10/jquery-3-5-0-released/\nhttps://jquery.com/upgrade-guide/3.5/\n\n### For more information\nIf you have any questions or comments about this advisory, search\nfor a relevant issue in\n[the jQuery repo](https://github.com/jquery/jquery/issues).\n\nIf you don't find an answer, open a new issue.\"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-11022","reference_id":"","reference_type":"","scores":[{"value":"0.02456","scoring_system":"epss","scoring_elements":"0.85507","published_at":"2026-06-08T12:55:00Z"},{"value":"0.02456","scoring_system":"epss","scoring_elements":"0.85522","published_at":"2026-06-07T12:55:00Z"},{"value":"0.02456","scoring_system":"epss","scoring_elements":"0.85521","published_at":"2026-06-05T12:55:00Z"},{"value":"0.02456","scoring_system":"epss","scoring_elements":"0.85498","published_at":"2026-06-04T12:55:00Z"},{"value":"0.02456","scoring_system":"epss","scoring_elements":"0.85527","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-11022"},{"reference_url":"https://blog.jquery.com/2020/04/10/jquery-3-5-0-released","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://blog.jquery.com/2020/04/10/jquery-3-5-0-released"},{"reference_url":"https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/","reference_id":"","reference_type":"","scores":[],"url":"https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11022","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11022"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11023","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11023"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13662","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13662"},{"reference_url":"http://security.netapp.com/advisory/ntap-20200511-0006","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://security.netapp.com/advisory/ntap-20200511-0006"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/jquery/jquery","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/jquery/jquery"},{"reference_url":"https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77"},{"reference_url":"https://github.com/jquery/jquery/releases/tag/3.5.0","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/jquery/jquery/releases/tag/3.5.0"},{"reference_url":"https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3","scoring_elements":""},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2"},{"reference_url":"https://github.com/maximebf/php-debugbar/commit/847216e60544258c881f2733d699bbcfeefac0fc","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/maximebf/php-debugbar/commit/847216e60544258c881f2733d699bbcfeefac0fc"},{"reference_url":"https://github.com/maximebf/php-debugbar/issues/447","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/maximebf/php-debugbar/issues/447"},{"reference_url":"https://jquery.com/upgrade-guide/3.5","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://jquery.com/upgrade-guide/3.5"},{"reference_url":"https://jquery.com/upgrade-guide/3.5/","reference_id":"","reference_type":"","scores":[],"url":"https://jquery.com/upgrade-guide/3.5/"},{"reference_url":"https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67@%3Cdev.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67@%3Cdev.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rdf44341677cf7eec7e9aa96dcf3f37ed709544863d619cca8c36f133@%3Ccommits.airflow.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rdf44341677cf7eec7e9aa96dcf3f37ed709544863d619cca8c36f133@%3Ccommits.airflow.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/03/msg00033.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2021/03/msg00033.html"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOE7P7APPRQKD4FGNHBKJPDY6FFCOH3W","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOE7P7APPRQKD4FGNHBKJPDY6FFCOH3W"},{"reference_url":"https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html"},{"reference_url":"https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html"},{"reference_url":"https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.html"},{"reference_url":"https://packetstormsecurity.com/files/162159/jQuery-1.2-Cross-Site-Scripting.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://packetstormsecurity.com/files/162159/jQuery-1.2-Cross-Site-Scripting.html"},{"reference_url":"https://security.gentoo.org/glsa/202007-03","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.gentoo.org/glsa/202007-03"},{"reference_url":"https://www.debian.org/security/2020/dsa-4693","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2020/dsa-4693"},{"reference_url":"https://www.drupal.org/sa-core-2020-002","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2020-002"},{"reference_url":"https://www.oracle.com/security-alerts/cpuApr2021.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpuapr2022.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujan2021.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpujan2021.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujan2022.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpujan2022.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujul2020.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpujul2020.html"},{"reference_url":"https://www.oracle.com//security-alerts/cpujul2021.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujul2022.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpujul2022.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpuoct2020.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpuoct2020.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpuoct2021.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"reference_url":"https://www.tenable.com/security/tns-2020-10","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.tenable.com/security/tns-2020-10"},{"reference_url":"https://www.tenable.com/security/tns-2020-11","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.tenable.com/security/tns-2020-11"},{"reference_url":"https://www.tenable.com/security/tns-2021-02","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.tenable.com/security/tns-2021-02"},{"reference_url":"https://www.tenable.com/security/tns-2021-10","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.tenable.com/security/tns-2021-10"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828406","reference_id":"1828406","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828406"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/49766.txt","reference_id":"CVE-2020-11022","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/49766.txt"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11022","reference_id":"CVE-2020-11022","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11022"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2020-11022.yml","reference_id":"CVE-2020-11022.YML","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2020-11022.yml"},{"reference_url":"https://github.com/advisories/GHSA-gxr4-xjj5-5px2","reference_id":"GHSA-gxr4-xjj5-5px2","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-gxr4-xjj5-5px2"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2217","reference_id":"RHSA-2020:2217","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2217"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2362","reference_id":"RHSA-2020:2362","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2362"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2412","reference_id":"RHSA-2020:2412","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2412"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2813","reference_id":"RHSA-2020:2813","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2813"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:3247","reference_id":"RHSA-2020:3247","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:3247"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:3807","reference_id":"RHSA-2020:3807","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:3807"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:3936","reference_id":"RHSA-2020:3936","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:3936"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:4211","reference_id":"RHSA-2020:4211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:4211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:4298","reference_id":"RHSA-2020:4298","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:4298"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:4670","reference_id":"RHSA-2020:4670","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:4670"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:4847","reference_id":"RHSA-2020:4847","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:4847"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:5249","reference_id":"RHSA-2020:5249","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:5249"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:0778","reference_id":"RHSA-2021:0778","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:0778"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6393","reference_id":"RHSA-2022:6393","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6393"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:0552","reference_id":"RHSA-2023:0552","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:0552"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:0553","reference_id":"RHSA-2023:0553","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:0553"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:0554","reference_id":"RHSA-2023:0554","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:0554"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:0556","reference_id":"RHSA-2023:0556","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:0556"},{"reference_url":"https://usn.ubuntu.com/7246-1/","reference_id":"USN-7246-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7246-1/"},{"reference_url":"https://usn.ubuntu.com/7622-1/","reference_id":"USN-7622-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7622-1/"},{"reference_url":"https://usn.ubuntu.com/7658-1/","reference_id":"USN-7658-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7658-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/77200?format=json","purl":"pkg:composer/drupal/core@8.7.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.7.14"},{"url":"http://public2.vulnerablecode.io/api/packages/249828?format=json","purl":"pkg:composer/drupal/core@8.8.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.0-alpha1"},{"url":"http://public2.vulnerablecode.io/api/packages/77201?format=json","purl":"pkg:composer/drupal/core@8.8.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-9rmk-e8zd-9bcw"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-phwu-rdm2-ufhr"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-sg4r-hncm-dqcq"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vz31-7246-aken"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-x783-ggg8-auck"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"},{"vulnerability":"VCID-zr84-4jzv-2fd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.6"},{"url":"http://public2.vulnerablecode.io/api/packages/253814?format=json","purl":"pkg:composer/drupal/core@8.9.0-beta1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.9.0-beta1"}],"aliases":["CVE-2020-11022","GHSA-gxr4-xjj5-5px2"],"risk_score":10.0,"exploitability":"2.0","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-jed8-4cv5-6bcr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/48398?format=json","vulnerability_id":"VCID-kzrs-mrga-nyej","summary":"User Interface (UI) Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing. This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-13082","reference_id":"","reference_type":"","scores":[{"value":"0.00044","scoring_system":"epss","scoring_elements":"0.13805","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00044","scoring_system":"epss","scoring_elements":"0.13889","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00044","scoring_system":"epss","scoring_elements":"0.13926","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00044","scoring_system":"epss","scoring_elements":"0.13922","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-13082"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://www.drupal.org/sa-core-2025-007","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-11-18T20:32:40Z/"}],"url":"https://www.drupal.org/sa-core-2025-007"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13082","reference_id":"CVE-2025-13082","reference_type":"","scores":[{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13082"},{"reference_url":"https://github.com/advisories/GHSA-h89p-5896-f4q8","reference_id":"GHSA-h89p-5896-f4q8","reference_type":"","scores":[{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-h89p-5896-f4q8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/71441?format=json","purl":"pkg:composer/drupal/core@10.4.9","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.4.9"},{"url":"http://public2.vulnerablecode.io/api/packages/71442?format=json","purl":"pkg:composer/drupal/core@10.5.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.5.6"},{"url":"http://public2.vulnerablecode.io/api/packages/71443?format=json","purl":"pkg:composer/drupal/core@11.1.9","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.1.9"},{"url":"http://public2.vulnerablecode.io/api/packages/71444?format=json","purl":"pkg:composer/drupal/core@11.2.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.2.8"}],"aliases":["CVE-2025-13082","GHSA-h89p-5896-f4q8"],"risk_score":1.5,"exploitability":"0.5","weighted_severity":"3.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-kzrs-mrga-nyej"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/42392?format=json","vulnerability_id":"VCID-nacy-y1qt-5yhb","summary":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nAccess Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13668","reference_id":"","reference_type":"","scores":[{"value":"0.00223","scoring_system":"epss","scoring_elements":"0.44988","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00223","scoring_system":"epss","scoring_elements":"0.45008","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00223","scoring_system":"epss","scoring_elements":"0.45004","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00223","scoring_system":"epss","scoring_elements":"0.44959","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00223","scoring_system":"epss","scoring_elements":"0.44935","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13668"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/drupal/core/commit/3184fa4b2f3b65b44884b5e858cdc7794d34b4c8","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/3184fa4b2f3b65b44884b5e858cdc7794d34b4c8"},{"reference_url":"https://github.com/drupal/core/commit/58330ba58d1ac6f1a0a549e8dbde8a3e094bf4fb","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/58330ba58d1ac6f1a0a549e8dbde8a3e094bf4fb"},{"reference_url":"https://github.com/drupal/core/commit/d4be028d81fb6b067513d788b60c3e6fc8fbd0a2","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/d4be028d81fb6b067513d788b60c3e6fc8fbd0a2"},{"reference_url":"https://www.drupal.org/sa-core-2020-009","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2020-009"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13668","reference_id":"CVE-2020-13668","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13668"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2020-13668.yaml","reference_id":"CVE-2020-13668.YAML","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2020-13668.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2020-13668.yaml","reference_id":"CVE-2020-13668.YAML","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2020-13668.yaml"},{"reference_url":"https://github.com/advisories/GHSA-m6q5-wv4x-fv6h","reference_id":"GHSA-m6q5-wv4x-fv6h","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-m6q5-wv4x-fv6h"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/60658?format=json","purl":"pkg:composer/drupal/core@8.8.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.10"},{"url":"http://public2.vulnerablecode.io/api/packages/60651?format=json","purl":"pkg:composer/drupal/core@8.9.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-67da-qxh5-aydx"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.9.6"},{"url":"http://public2.vulnerablecode.io/api/packages/60652?format=json","purl":"pkg:composer/drupal/core@9.0.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-67da-qxh5-aydx"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.0.6"}],"aliases":["CVE-2020-13668","GHSA-m6q5-wv4x-fv6h"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-nacy-y1qt-5yhb"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/48403?format=json","vulnerability_id":"VCID-p54u-b18k-jyft","summary":"Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Drupal core allows Forceful Browsing. This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-13080","reference_id":"","reference_type":"","scores":[{"value":"0.00093","scoring_system":"epss","scoring_elements":"0.26032","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00093","scoring_system":"epss","scoring_elements":"0.26087","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00093","scoring_system":"epss","scoring_elements":"0.26133","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00093","scoring_system":"epss","scoring_elements":"0.26138","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-13080"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"2.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://www.drupal.org/sa-core-2025-005","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"2.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-18T20:35:13Z/"}],"url":"https://www.drupal.org/sa-core-2025-005"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13080","reference_id":"CVE-2025-13080","reference_type":"","scores":[{"value":"2.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13080"},{"reference_url":"https://github.com/advisories/GHSA-83v7-c2cf-p9c2","reference_id":"GHSA-83v7-c2cf-p9c2","reference_type":"","scores":[{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-83v7-c2cf-p9c2"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/71441?format=json","purl":"pkg:composer/drupal/core@10.4.9","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.4.9"},{"url":"http://public2.vulnerablecode.io/api/packages/71442?format=json","purl":"pkg:composer/drupal/core@10.5.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.5.6"},{"url":"http://public2.vulnerablecode.io/api/packages/71443?format=json","purl":"pkg:composer/drupal/core@11.1.9","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.1.9"},{"url":"http://public2.vulnerablecode.io/api/packages/71444?format=json","purl":"pkg:composer/drupal/core@11.2.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.2.8"}],"aliases":["CVE-2025-13080","GHSA-83v7-c2cf-p9c2"],"risk_score":1.9,"exploitability":"0.5","weighted_severity":"3.7","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-p54u-b18k-jyft"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/54839?format=json","vulnerability_id":"VCID-pzp5-2bpz-jfe2","summary":"Drupal core Cross-Site Scripting (XSS) vulnerabilities\nThe Drupal project uses the CKEditor, library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal.\n\nVulnerabilities are possible if Drupal is configured to allow use of the CKEditor library for WYSIWYG editing. An attacker that can create or edit content (even without access to CKEditor themselves) may be able to exploit one or more Cross-Site Scripting (XSS) vulnerabilities to target users with access to the WYSIWYG CKEditor, including site admins with privileged access.","references":[{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2021-05-26.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2021-05-26.yaml"},{"reference_url":"https://www.drupal.org/sa-core-2021-005","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2021-005"},{"reference_url":"https://github.com/advisories/GHSA-vfgc-c76h-mwh4","reference_id":"GHSA-vfgc-c76h-mwh4","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-vfgc-c76h-mwh4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/81381?format=json","purl":"pkg:composer/drupal/core@8.9.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.9.18"},{"url":"http://public2.vulnerablecode.io/api/packages/81382?format=json","purl":"pkg:composer/drupal/core@9.1.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.1.12"},{"url":"http://public2.vulnerablecode.io/api/packages/81383?format=json","purl":"pkg:composer/drupal/core@9.2.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2g67-a42m-qfbh"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5nbj-5x5a-93hz"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-ydy1-x277-1fhj"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.2.4"}],"aliases":["GHSA-vfgc-c76h-mwh4"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pzp5-2bpz-jfe2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/45056?format=json","vulnerability_id":"VCID-rd4g-h1j9-23cb","summary":"Unrestricted Upload of File with Dangerous Type\nDrupal core sanitizes filenames with dangerous extensions upon upload (reference: SA-CORE-2020-012) and strips leading and trailing dots from filenames to prevent uploading server configuration files (reference: SA-CORE-2019-010). However, the protections for these two vulnerabilities previously does not work correctly together. As a result, if the site were configured to allow the upload of files with an htaccess extension, these files' filenames would not be properly sanitized. This could allow bypassing the protections provided by Drupal core's default .htaccess files and possible remote code execution on Apache web servers. This issue is mitigated by the fact that it requires a field administrator to explicitly configure a file field to allow htaccess as an extension (a restricted permission), or a contributed module or custom code that overrides allowed file uploads.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-25277","reference_id":"","reference_type":"","scores":[{"value":"0.02448","scoring_system":"epss","scoring_elements":"0.85472","published_at":"2026-06-04T12:55:00Z"},{"value":"0.02448","scoring_system":"epss","scoring_elements":"0.85481","published_at":"2026-06-08T12:55:00Z"},{"value":"0.02448","scoring_system":"epss","scoring_elements":"0.85501","published_at":"2026-06-06T12:55:00Z"},{"value":"0.02448","scoring_system":"epss","scoring_elements":"0.85496","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-25277"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/drupal/core/commit/1cd1830d79f221cc8490f53c2bb487dd07094f17","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/1cd1830d79f221cc8490f53c2bb487dd07094f17"},{"reference_url":"https://github.com/drupal/core/commit/5d464ea4407c50e40dcf6cb5ee376e7b8dd36f3a","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/5d464ea4407c50e40dcf6cb5ee376e7b8dd36f3a"},{"reference_url":"https://www.drupal.org/sa-core-2022-014","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-03T18:41:13Z/"}],"url":"https://www.drupal.org/sa-core-2022-014"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25277","reference_id":"CVE-2022-25277","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25277"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2022-25277.yaml","reference_id":"CVE-2022-25277.YAML","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2022-25277.yaml"},{"reference_url":"https://github.com/advisories/GHSA-6955-67hm-vjjq","reference_id":"GHSA-6955-67hm-vjjq","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-6955-67hm-vjjq"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/64975?format=json","purl":"pkg:composer/drupal/core@9.3.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.3.19"},{"url":"http://public2.vulnerablecode.io/api/packages/64976?format=json","purl":"pkg:composer/drupal/core@9.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.4.3"}],"aliases":["CVE-2022-25277","GHSA-6955-67hm-vjjq","GMS-2022-3361"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rd4g-h1j9-23cb"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/47000?format=json","vulnerability_id":"VCID-t89y-c9hq-9bhk","summary":"Drupal core Denial of Service vulnerability\nThe Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service (DOS).\n\nSites that do not use the Comment module are not affected.","references":[{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/drupal/core/commit/2f76ac716ca8019bc60579fdfc8aa6cd65d57dff","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/2f76ac716ca8019bc60579fdfc8aa6cd65d57dff"},{"reference_url":"https://github.com/drupal/core/commit/5e606b560ac4ecb08135f12b6165bbe0348346a0","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core/commit/5e606b560ac4ecb08135f12b6165bbe0348346a0"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2024-01-17.yaml","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2024-01-17.yaml"},{"reference_url":"https://www.drupal.org/sa-core-2024-001","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2024-001"},{"reference_url":"https://github.com/advisories/GHSA-6ccv-8fgf-cjpw","reference_id":"GHSA-6ccv-8fgf-cjpw","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-6ccv-8fgf-cjpw"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/68876?format=json","purl":"pkg:composer/drupal/core@10.1.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jyz4-ymrp-pka7"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.1.8"},{"url":"http://public2.vulnerablecode.io/api/packages/68877?format=json","purl":"pkg:composer/drupal/core@10.2.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jyz4-ymrp-pka7"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.2.2"}],"aliases":["GHSA-6ccv-8fgf-cjpw","GMS-2024-214"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-t89y-c9hq-9bhk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/51420?format=json","vulnerability_id":"VCID-tp81-dw6e-9qah","summary":"CKEditor 4.0 vulnerability in the HTML Data Processor\nA cross-site scripting (XSS) vulnerability in the HTML Data Processor\nfor CKEditor 4.0 before 4.14.0 allows remote attackers to inject arbitrary web script\nthrough a crafted \"protected\" comment (with the cke_protected syntax).","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-9281","reference_id":"","reference_type":"","scores":[{"value":"0.01194","scoring_system":"epss","scoring_elements":"0.79196","published_at":"2026-06-04T12:55:00Z"},{"value":"0.01194","scoring_system":"epss","scoring_elements":"0.79209","published_at":"2026-06-08T12:55:00Z"},{"value":"0.01194","scoring_system":"epss","scoring_elements":"0.79219","published_at":"2026-06-07T12:55:00Z"},{"value":"0.01194","scoring_system":"epss","scoring_elements":"0.79228","published_at":"2026-06-06T12:55:00Z"},{"value":"0.01194","scoring_system":"epss","scoring_elements":"0.79222","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-9281"},{"reference_url":"https://github.com/ckeditor/ckeditor4","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":""},{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ckeditor/ckeditor4"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7OJ4BSS3VEAEXPNSOOUAXX6RDNECGZNO","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7OJ4BSS3VEAEXPNSOOUAXX6RDNECGZNO"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7OJ4BSS3VEAEXPNSOOUAXX6RDNECGZNO/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7OJ4BSS3VEAEXPNSOOUAXX6RDNECGZNO/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L322YA73LCV3TO7ORY45WQDAFJVNKXBE","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L322YA73LCV3TO7ORY45WQDAFJVNKXBE"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L322YA73LCV3TO7ORY45WQDAFJVNKXBE/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L322YA73LCV3TO7ORY45WQDAFJVNKXBE/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4HHYQ6N452XTCIROFMJOTYEUWSB6FR4","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4HHYQ6N452XTCIROFMJOTYEUWSB6FR4"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4HHYQ6N452XTCIROFMJOTYEUWSB6FR4/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4HHYQ6N452XTCIROFMJOTYEUWSB6FR4/"},{"reference_url":"https://www.oracle.com/security-alerts/cpuApr2021.html","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujan2021.html","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpujan2021.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujan2022.html","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpujan2022.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpuoct2020.html","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpuoct2020.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpuoct2021.html","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9281","reference_id":"CVE-2020-9281","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9281"},{"reference_url":"https://github.com/advisories/GHSA-vcjf-mgcg-jxjq","reference_id":"GHSA-vcjf-mgcg-jxjq","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-vcjf-mgcg-jxjq"},{"reference_url":"https://usn.ubuntu.com/5340-1/","reference_id":"USN-5340-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5340-1/"},{"reference_url":"https://usn.ubuntu.com/USN-5340-2/","reference_id":"USN-USN-5340-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/USN-5340-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/76830?format=json","purl":"pkg:composer/drupal/core@8.7.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jed8-4cv5-6bcr"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vjrr-h9sh-3bcu"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.7.12"},{"url":"http://public2.vulnerablecode.io/api/packages/249828?format=json","purl":"pkg:composer/drupal/core@8.8.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.0-alpha1"},{"url":"http://public2.vulnerablecode.io/api/packages/76831?format=json","purl":"pkg:composer/drupal/core@8.8.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-9rmk-e8zd-9bcw"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jed8-4cv5-6bcr"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-phwu-rdm2-ufhr"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-sg4r-hncm-dqcq"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vjrr-h9sh-3bcu"},{"vulnerability":"VCID-vz31-7246-aken"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-x783-ggg8-auck"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"},{"vulnerability":"VCID-zr84-4jzv-2fd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.4"},{"url":"http://public2.vulnerablecode.io/api/packages/249831?format=json","purl":"pkg:composer/drupal/core@9.0.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.0.0-alpha1"}],"aliases":["CVE-2020-9281","GHSA-vcjf-mgcg-jxjq"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tp81-dw6e-9qah"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3853?format=json","vulnerability_id":"VCID-tpzm-u3qp-akc8","summary":"multiple issues","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13672","reference_id":"","reference_type":"","scores":[{"value":"0.00555","scoring_system":"epss","scoring_elements":"0.68518","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00555","scoring_system":"epss","scoring_elements":"0.68469","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00555","scoring_system":"epss","scoring_elements":"0.6851","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00555","scoring_system":"epss","scoring_elements":"0.68496","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00555","scoring_system":"epss","scoring_elements":"0.68511","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13672"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://www.drupal.org/sa-core-2021-002","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2021-002"},{"reference_url":"https://security.archlinux.org/AVG-1463","reference_id":"AVG-1463","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1463"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13672","reference_id":"CVE-2020-13672","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13672"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2020-13672.yaml","reference_id":"CVE-2020-13672.YAML","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2020-13672.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2020-13672.yaml","reference_id":"CVE-2020-13672.YAML","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2020-13672.yaml"},{"reference_url":"https://github.com/advisories/GHSA-3m36-mjwj-352c","reference_id":"GHSA-3m36-mjwj-352c","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-3m36-mjwj-352c"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/60655?format=json","purl":"pkg:composer/drupal/core@8.9.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.9.14"},{"url":"http://public2.vulnerablecode.io/api/packages/60656?format=json","purl":"pkg:composer/drupal/core@9.0.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.0.12"},{"url":"http://public2.vulnerablecode.io/api/packages/60657?format=json","purl":"pkg:composer/drupal/core@9.1.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.1.7"}],"aliases":["CVE-2020-13672","GHSA-3m36-mjwj-352c"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tpzm-u3qp-akc8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/54884?format=json","vulnerability_id":"VCID-uq9s-79g7-rqh6","summary":"Drupal core Arbitrary PHP code execution\nThe Drupal project uses the PEAR Archive_Tar library. The PEAR Archive_Tar library has released a security update that impacts Drupal. For more information please see:\nCVE-2020-28948\nCVE-2020-28949\n\nMultiple vulnerabilities are possible if Drupal is configured to allow .tar, .tar.gz, .bz2, or .tlz file uploads and processes them.\n\nTo mitigate this issue, prevent untrusted users from uploading .tar, .tar.gz, .bz2, or .tlz files.","references":[{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2020-11-25.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2020-11-25.yaml"},{"reference_url":"https://www.drupal.org/sa-core-2020-013","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/sa-core-2020-013"},{"reference_url":"https://github.com/advisories/GHSA-gxxj-g9v8-w28p","reference_id":"GHSA-gxxj-g9v8-w28p","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-gxxj-g9v8-w28p"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/79189?format=json","purl":"pkg:composer/drupal/core@8.8.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.12"},{"url":"http://public2.vulnerablecode.io/api/packages/79181?format=json","purl":"pkg:composer/drupal/core@8.9.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-67da-qxh5-aydx"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.9.10"},{"url":"http://public2.vulnerablecode.io/api/packages/79182?format=json","purl":"pkg:composer/drupal/core@9.0.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-67da-qxh5-aydx"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.0.9"}],"aliases":["GHSA-gxxj-g9v8-w28p"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-uq9s-79g7-rqh6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/51649?format=json","vulnerability_id":"VCID-vjrr-h9sh-3bcu","summary":"Potential XSS vulnerability in jQuery\n## Impact\n\nPassing HTML containing `<option>` elements from untrusted sources - even after\nsanitizing them - to one of jQuery's DOM manipulation methods (i.e. `.html()`,\n`.append()`, and others) may execute untrusted code.\n\n## Workarounds\n\nTo workaround this issue without upgrading, use DOMPurify with its\n`SAFE_FOR_JQUERY` option to sanitize the HTML string before passing it to a\njQuery method.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.html"},{"reference_url":"http://packetstormsecurity.com/files/162160/jQuery-1.0.3-Cross-Site-Scripting.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"http://packetstormsecurity.com/files/162160/jQuery-1.0.3-Cross-Site-Scripting.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-11023","reference_id":"","reference_type":"","scores":[{"value":"0.3466","scoring_system":"epss","scoring_elements":"0.97098","published_at":"2026-06-04T12:55:00Z"},{"value":"0.3466","scoring_system":"epss","scoring_elements":"0.97103","published_at":"2026-06-08T12:55:00Z"},{"value":"0.3466","scoring_system":"epss","scoring_elements":"0.97101","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-11023"},{"reference_url":"https://blog.jquery.com/2020/04/10/jquery-3-5-0-released","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3","scoring_elements":""},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://blog.jquery.com/2020/04/10/jquery-3-5-0-released"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11022","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11022"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11023","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11023"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13662","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13662"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/jquery/jquery","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/jquery/jquery"},{"reference_url":"https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77"},{"reference_url":"https://github.com/jquery/jquery/releases/tag/3.5.0","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/jquery/jquery/releases/tag/3.5.0"},{"reference_url":"https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#410","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#410"},{"reference_url":"https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#440","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#440"},{"reference_url":"https://github.com/rails/jquery-rails/blob/v4.3.5/vendor/assets/javascripts/jquery3.js#L5979","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rails/jquery-rails/blob/v4.3.5/vendor/assets/javascripts/jquery3.js#L5979"},{"reference_url":"https://github.com/rails/jquery-rails/blob/v4.4.0/vendor/assets/javascripts/jquery3.js#L6162","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rails/jquery-rails/blob/v4.4.0/vendor/assets/javascripts/jquery3.js#L6162"},{"reference_url":"https://jquery.com/upgrade-guide/3.5","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://jquery.com/upgrade-guide/3.5"},{"reference_url":"https://jquery.com/upgrade-guide/3.5/","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://jquery.com/upgrade-guide/3.5/"},{"reference_url":"https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36%40%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36%40%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r0593393ca1e97b1e7e098fe69d414d6bd0a467148e9138d07e86ebbb@%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r0593393ca1e97b1e7e098fe69d414d6bd0a467148e9138d07e86ebbb@%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r0593393ca1e97b1e7e098fe69d414d6bd0a467148e9138d07e86ebbb%40%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r0593393ca1e97b1e7e098fe69d414d6bd0a467148e9138d07e86ebbb%40%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r07ab379471fb15644bf7a92e4a98cbc7df3cf4e736abae0cc7625fe6@%3Cdev.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r07ab379471fb15644bf7a92e4a98cbc7df3cf4e736abae0cc7625fe6@%3Cdev.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r07ab379471fb15644bf7a92e4a98cbc7df3cf4e736abae0cc7625fe6%40%3Cdev.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r07ab379471fb15644bf7a92e4a98cbc7df3cf4e736abae0cc7625fe6%40%3Cdev.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r094f435595582f6b5b24b66fedf80543aa8b1d57a3688fbcc21f06ec@%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r094f435595582f6b5b24b66fedf80543aa8b1d57a3688fbcc21f06ec@%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r094f435595582f6b5b24b66fedf80543aa8b1d57a3688fbcc21f06ec%40%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r094f435595582f6b5b24b66fedf80543aa8b1d57a3688fbcc21f06ec%40%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r1fed19c860a0d470f2a3eded12795772c8651ff583ef951ddac4918c@%3Cgitbox.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r1fed19c860a0d470f2a3eded12795772c8651ff583ef951ddac4918c@%3Cgitbox.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r1fed19c860a0d470f2a3eded12795772c8651ff583ef951ddac4918c%40%3Cgitbox.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r1fed19c860a0d470f2a3eded12795772c8651ff583ef951ddac4918c%40%3Cgitbox.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r2c85121a47442036c7f8353a3724aa04f8ecdfda1819d311ba4f5330@%3Cdev.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r2c85121a47442036c7f8353a3724aa04f8ecdfda1819d311ba4f5330@%3Cdev.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r2c85121a47442036c7f8353a3724aa04f8ecdfda1819d311ba4f5330%40%3Cdev.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r2c85121a47442036c7f8353a3724aa04f8ecdfda1819d311ba4f5330%40%3Cdev.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r3702ede0ff83a29ba3eb418f6f11c473d6e3736baba981a8dbd9c9ef@%3Cdev.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r3702ede0ff83a29ba3eb418f6f11c473d6e3736baba981a8dbd9c9ef@%3Cdev.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r3702ede0ff83a29ba3eb418f6f11c473d6e3736baba981a8dbd9c9ef%40%3Cdev.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r3702ede0ff83a29ba3eb418f6f11c473d6e3736baba981a8dbd9c9ef%40%3Cdev.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48%40%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48%40%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r4aadb98086ca72ed75391f54167522d91489a0d0ae25b12baa8fc7c5@%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r4aadb98086ca72ed75391f54167522d91489a0d0ae25b12baa8fc7c5@%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r4aadb98086ca72ed75391f54167522d91489a0d0ae25b12baa8fc7c5%40%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r4aadb98086ca72ed75391f54167522d91489a0d0ae25b12baa8fc7c5%40%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r4dba67be3239b34861f1b9cfdf9dfb3a90272585dcce374112ed6e16@%3Cdev.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r4dba67be3239b34861f1b9cfdf9dfb3a90272585dcce374112ed6e16@%3Cdev.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r4dba67be3239b34861f1b9cfdf9dfb3a90272585dcce374112ed6e16%40%3Cdev.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r4dba67be3239b34861f1b9cfdf9dfb3a90272585dcce374112ed6e16%40%3Cdev.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae%40%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae%40%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r55f5e066cc7301e3630ce90bbbf8d28c82212ae1f2d4871012141494@%3Cdev.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r55f5e066cc7301e3630ce90bbbf8d28c82212ae1f2d4871012141494@%3Cdev.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r55f5e066cc7301e3630ce90bbbf8d28c82212ae1f2d4871012141494%40%3Cdev.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r55f5e066cc7301e3630ce90bbbf8d28c82212ae1f2d4871012141494%40%3Cdev.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760%40%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760%40%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r6c4df3b33e625a44471009a172dabe6865faec8d8f21cac2303463b1@%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r6c4df3b33e625a44471009a172dabe6865faec8d8f21cac2303463b1@%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r6c4df3b33e625a44471009a172dabe6865faec8d8f21cac2303463b1%40%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r6c4df3b33e625a44471009a172dabe6865faec8d8f21cac2303463b1%40%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r6e97b37963926f6059ecc1e417721608723a807a76af41d4e9dbed49@%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r6e97b37963926f6059ecc1e417721608723a807a76af41d4e9dbed49@%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r6e97b37963926f6059ecc1e417721608723a807a76af41d4e9dbed49%40%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r6e97b37963926f6059ecc1e417721608723a807a76af41d4e9dbed49%40%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d%40%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d%40%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c%40%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c%40%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r9006ad2abf81d02a0ef2126bab5177987e59095b7194a487c4ea247c@%3Ccommits.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r9006ad2abf81d02a0ef2126bab5177987e59095b7194a487c4ea247c@%3Ccommits.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r9006ad2abf81d02a0ef2126bab5177987e59095b7194a487c4ea247c%40%3Ccommits.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r9006ad2abf81d02a0ef2126bab5177987e59095b7194a487c4ea247c%40%3Ccommits.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r9c5fda81e4bca8daee305b4c03283dddb383ab8428a151d4cb0b3b15@%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r9c5fda81e4bca8daee305b4c03283dddb383ab8428a151d4cb0b3b15@%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r9c5fda81e4bca8daee305b4c03283dddb383ab8428a151d4cb0b3b15%40%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r9c5fda81e4bca8daee305b4c03283dddb383ab8428a151d4cb0b3b15%40%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r9e0bd31b7da9e7403478d22652b8760c946861f8ebd7bd750844898e@%3Cdev.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r9e0bd31b7da9e7403478d22652b8760c946861f8ebd7bd750844898e@%3Cdev.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r9e0bd31b7da9e7403478d22652b8760c946861f8ebd7bd750844898e%40%3Cdev.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/r9e0bd31b7da9e7403478d22652b8760c946861f8ebd7bd750844898e%40%3Cdev.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/ra32c7103ded9041c7c1cb8c12c8d125a6b2f3f3270e2937ef8417fac@%3Cgitbox.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/ra32c7103ded9041c7c1cb8c12c8d125a6b2f3f3270e2937ef8417fac@%3Cgitbox.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/ra32c7103ded9041c7c1cb8c12c8d125a6b2f3f3270e2937ef8417fac%40%3Cgitbox.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/ra32c7103ded9041c7c1cb8c12c8d125a6b2f3f3270e2937ef8417fac%40%3Cgitbox.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/ra374bb0299b4aa3e04edde01ebc03ed6f90cf614dad40dd428ce8f72@%3Cgitbox.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/ra374bb0299b4aa3e04edde01ebc03ed6f90cf614dad40dd428ce8f72@%3Cgitbox.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/ra374bb0299b4aa3e04edde01ebc03ed6f90cf614dad40dd428ce8f72%40%3Cgitbox.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/ra374bb0299b4aa3e04edde01ebc03ed6f90cf614dad40dd428ce8f72%40%3Cgitbox.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/ra3c9219fcb0b289e18e9ec5a5ebeaa5c17d6b79a201667675af6721c@%3Cgitbox.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/ra3c9219fcb0b289e18e9ec5a5ebeaa5c17d6b79a201667675af6721c@%3Cgitbox.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/ra3c9219fcb0b289e18e9ec5a5ebeaa5c17d6b79a201667675af6721c%40%3Cgitbox.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/ra3c9219fcb0b289e18e9ec5a5ebeaa5c17d6b79a201667675af6721c%40%3Cgitbox.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/ra406b3adfcffcb5ce8707013bdb7c35e3ffc2776a8a99022f15274c6@%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/ra406b3adfcffcb5ce8707013bdb7c35e3ffc2776a8a99022f15274c6@%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/ra406b3adfcffcb5ce8707013bdb7c35e3ffc2776a8a99022f15274c6%40%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/ra406b3adfcffcb5ce8707013bdb7c35e3ffc2776a8a99022f15274c6%40%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rab82dd040f302018c85bd07d33f5604113573514895ada523c3401d9@%3Ccommits.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rab82dd040f302018c85bd07d33f5604113573514895ada523c3401d9@%3Ccommits.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rab82dd040f302018c85bd07d33f5604113573514895ada523c3401d9%40%3Ccommits.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/rab82dd040f302018c85bd07d33f5604113573514895ada523c3401d9%40%3Ccommits.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/radcb2aa874a79647789f3563fcbbceaf1045a029ee8806b59812a8ea@%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/radcb2aa874a79647789f3563fcbbceaf1045a029ee8806b59812a8ea@%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/radcb2aa874a79647789f3563fcbbceaf1045a029ee8806b59812a8ea%40%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/radcb2aa874a79647789f3563fcbbceaf1045a029ee8806b59812a8ea%40%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rb25c3bc7418ae75cba07988dafe1b6912f76a9dd7d94757878320d61@%3Cgitbox.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rb25c3bc7418ae75cba07988dafe1b6912f76a9dd7d94757878320d61@%3Cgitbox.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rb25c3bc7418ae75cba07988dafe1b6912f76a9dd7d94757878320d61%40%3Cgitbox.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/rb25c3bc7418ae75cba07988dafe1b6912f76a9dd7d94757878320d61%40%3Cgitbox.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rb69b7d8217c1a6a2100247a5d06ce610836b31e3f5d73fc113ded8e7@%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rb69b7d8217c1a6a2100247a5d06ce610836b31e3f5d73fc113ded8e7@%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rb69b7d8217c1a6a2100247a5d06ce610836b31e3f5d73fc113ded8e7%40%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/rb69b7d8217c1a6a2100247a5d06ce610836b31e3f5d73fc113ded8e7%40%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67@%3Cdev.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67@%3Cdev.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67%40%3Cdev.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67%40%3Cdev.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rd38b4185a797b324c8dd940d9213cf99fcdc2dbf1fc5a63ba7dee8c9@%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rd38b4185a797b324c8dd940d9213cf99fcdc2dbf1fc5a63ba7dee8c9@%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rd38b4185a797b324c8dd940d9213cf99fcdc2dbf1fc5a63ba7dee8c9%40%3Cissues.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/rd38b4185a797b324c8dd940d9213cf99fcdc2dbf1fc5a63ba7dee8c9%40%3Cissues.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rda99599896c3667f2cc9e9d34c7b6ef5d2bbed1f4801e1d75a2b0679@%3Ccommits.nifi.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rda99599896c3667f2cc9e9d34c7b6ef5d2bbed1f4801e1d75a2b0679@%3Ccommits.nifi.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rda99599896c3667f2cc9e9d34c7b6ef5d2bbed1f4801e1d75a2b0679%40%3Ccommits.nifi.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/rda99599896c3667f2cc9e9d34c7b6ef5d2bbed1f4801e1d75a2b0679%40%3Ccommits.nifi.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108%40%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108%40%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4%40%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4%40%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2@%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2@%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2%40%3Cissues.flink.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2%40%3Cissues.flink.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rf0f8939596081d84be1ae6a91d6248b96a02d8388898c372ac807817@%3Cdev.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rf0f8939596081d84be1ae6a91d6248b96a02d8388898c372ac807817@%3Cdev.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rf0f8939596081d84be1ae6a91d6248b96a02d8388898c372ac807817%40%3Cdev.felix.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/rf0f8939596081d84be1ae6a91d6248b96a02d8388898c372ac807817%40%3Cdev.felix.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rf1ba79e564fe7efc56aef7c986106f1cf67a3427d08e997e088e7a93@%3Cgitbox.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rf1ba79e564fe7efc56aef7c986106f1cf67a3427d08e997e088e7a93@%3Cgitbox.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rf1ba79e564fe7efc56aef7c986106f1cf67a3427d08e997e088e7a93%40%3Cgitbox.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/rf1ba79e564fe7efc56aef7c986106f1cf67a3427d08e997e088e7a93%40%3Cgitbox.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rf661a90a15da8da5922ba6127b3f5f8194d4ebec8855d60a0dd13248@%3Cdev.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rf661a90a15da8da5922ba6127b3f5f8194d4ebec8855d60a0dd13248@%3Cdev.hive.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rf661a90a15da8da5922ba6127b3f5f8194d4ebec8855d60a0dd13248%40%3Cdev.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.apache.org/thread.html/rf661a90a15da8da5922ba6127b3f5f8194d4ebec8855d60a0dd13248%40%3Cdev.hive.apache.org%3E"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/03/msg00033.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2021/03/msg00033.html"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B"},{"reference_url":"https://security.gentoo.org/glsa/202007-03","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://security.gentoo.org/glsa/202007-03"},{"reference_url":"https://security.netapp.com/advisory/ntap-20200511-0006","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.netapp.com/advisory/ntap-20200511-0006"},{"reference_url":"https://security.netapp.com/advisory/ntap-20230725-0003","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.netapp.com/advisory/ntap-20230725-0003"},{"reference_url":"https://security.snyk.io/vuln/SNYK-DOTNET-JQUERY-565440","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.snyk.io/vuln/SNYK-DOTNET-JQUERY-565440"},{"reference_url":"https://snyk.io/vuln/SNYK-JS-JQUERY-565129","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://snyk.io/vuln/SNYK-JS-JQUERY-565129"},{"reference_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-11023","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-11023"},{"reference_url":"https://www.debian.org/security/2020/dsa-4693","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://www.debian.org/security/2020/dsa-4693"},{"reference_url":"https://www.drupal.org/sa-core-2020-002","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://www.drupal.org/sa-core-2020-002"},{"reference_url":"https://www.oracle.com/security-alerts/cpuApr2021.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpuapr2022.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujan2021.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://www.oracle.com/security-alerts/cpujan2021.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujan2022.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://www.oracle.com/security-alerts/cpujan2022.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujul2020.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://www.oracle.com/security-alerts/cpujul2020.html"},{"reference_url":"https://www.oracle.com//security-alerts/cpujul2021.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujul2022.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://www.oracle.com/security-alerts/cpujul2022.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpuoct2020.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://www.oracle.com/security-alerts/cpuoct2020.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpuoct2021.html","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"reference_url":"https://www.tenable.com/security/tns-2021-02","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://www.tenable.com/security/tns-2021-02"},{"reference_url":"https://www.tenable.com/security/tns-2021-10","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://www.tenable.com/security/tns-2021-10"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850004","reference_id":"1850004","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850004"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY/","reference_id":"AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY/"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/49767.txt","reference_id":"CVE-2020-11023","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/49767.txt"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11023","reference_id":"CVE-2020-11023","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11023"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2020-11023.yml","reference_id":"CVE-2020-11023.YML","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2020-11023.yml"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2020-23064.yml","reference_id":"CVE-2020-23064.YML","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2020-23064.yml"},{"reference_url":"https://github.com/advisories/GHSA-jpcq-cgw6-v4j6","reference_id":"GHSA-jpcq-cgw6-v4j6","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-jpcq-cgw6-v4j6"},{"reference_url":"https://github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6","reference_id":"GHSA-jpcq-cgw6-v4j6","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6"},{"reference_url":"https://github.com/github/advisory-database/blob/99afa6fdeaf5d1d23e1021ff915a5e5dbc82c1f1/advisories/github-reviewed/2020/04/GHSA-jpcq-cgw6-v4j6/GHSA-jpcq-cgw6-v4j6.json#L20-L37","reference_id":"GHSA-jpcq-cgw6-v4j6.json#L20-L37","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/github/advisory-database/blob/99afa6fdeaf5d1d23e1021ff915a5e5dbc82c1f1/advisories/github-reviewed/2020/04/GHSA-jpcq-cgw6-v4j6/GHSA-jpcq-cgw6-v4j6.json#L20-L37"},{"reference_url":"https://security.netapp.com/advisory/ntap-20200511-0006/","reference_id":"ntap-20200511-0006","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://security.netapp.com/advisory/ntap-20200511-0006/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K/","reference_id":"QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2412","reference_id":"RHSA-2020:2412","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2412"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2813","reference_id":"RHSA-2020:2813","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2813"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:3247","reference_id":"RHSA-2020:3247","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:3247"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:3369","reference_id":"RHSA-2020:3369","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:3369"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:3807","reference_id":"RHSA-2020:3807","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:3807"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:4211","reference_id":"RHSA-2020:4211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:4211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:4298","reference_id":"RHSA-2020:4298","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:4298"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:4847","reference_id":"RHSA-2020:4847","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:4847"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:5249","reference_id":"RHSA-2020:5249","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:5249"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:5412","reference_id":"RHSA-2020:5412","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:5412"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:0778","reference_id":"RHSA-2021:0778","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:0778"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:0851","reference_id":"RHSA-2021:0851","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:0851"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:0860","reference_id":"RHSA-2021:0860","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:0860"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:1846","reference_id":"RHSA-2021:1846","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:1846"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4142","reference_id":"RHSA-2021:4142","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2021:4142"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:6393","reference_id":"RHSA-2022:6393","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:6393"},{"reference_url":"https://access.redhat.com/errata/RHSA-2022:7343","reference_id":"RHSA-2022:7343","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2022:7343"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:0552","reference_id":"RHSA-2023:0552","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:0552"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:0553","reference_id":"RHSA-2023:0553","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:0553"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:0554","reference_id":"RHSA-2023:0554","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:0554"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:0556","reference_id":"RHSA-2023:0556","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:0556"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1070","reference_id":"RHSA-2025:1070","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1070"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1185","reference_id":"RHSA-2025:1185","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1185"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1209","reference_id":"RHSA-2025:1209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1210","reference_id":"RHSA-2025:1210","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1210"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1211","reference_id":"RHSA-2025:1211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1212","reference_id":"RHSA-2025:1212","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1212"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1213","reference_id":"RHSA-2025:1213","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1213"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1214","reference_id":"RHSA-2025:1214","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1214"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1215","reference_id":"RHSA-2025:1215","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1215"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1216","reference_id":"RHSA-2025:1216","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1216"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1217","reference_id":"RHSA-2025:1217","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1217"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1247","reference_id":"RHSA-2025:1247","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1247"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1255","reference_id":"RHSA-2025:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1255"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1256","reference_id":"RHSA-2025:1256","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1256"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1300","reference_id":"RHSA-2025:1300","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1300"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1301","reference_id":"RHSA-2025:1301","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1301"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1303","reference_id":"RHSA-2025:1303","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1303"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1304","reference_id":"RHSA-2025:1304","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1304"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1305","reference_id":"RHSA-2025:1305","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1305"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1306","reference_id":"RHSA-2025:1306","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1306"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1308","reference_id":"RHSA-2025:1308","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1308"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1309","reference_id":"RHSA-2025:1309","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1309"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1310","reference_id":"RHSA-2025:1310","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1310"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1311","reference_id":"RHSA-2025:1311","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1311"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1312","reference_id":"RHSA-2025:1312","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1312"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1314","reference_id":"RHSA-2025:1314","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1314"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1315","reference_id":"RHSA-2025:1315","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1315"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1329","reference_id":"RHSA-2025:1329","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1329"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1338","reference_id":"RHSA-2025:1338","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1338"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1342","reference_id":"RHSA-2025:1342","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1342"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1346","reference_id":"RHSA-2025:1346","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1346"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1514","reference_id":"RHSA-2025:1514","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1514"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1515","reference_id":"RHSA-2025:1515","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1515"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1580","reference_id":"RHSA-2025:1580","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1580"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1601","reference_id":"RHSA-2025:1601","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1601"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:1983","reference_id":"RHSA-2025:1983","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:1983"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:2426","reference_id":"RHSA-2025:2426","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:2426"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4/","reference_id":"SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B/","reference_id":"SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-23T18:07:17Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B/"},{"reference_url":"https://usn.ubuntu.com/7246-1/","reference_id":"USN-7246-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7246-1/"},{"reference_url":"https://usn.ubuntu.com/7622-1/","reference_id":"USN-7622-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7622-1/"},{"reference_url":"https://usn.ubuntu.com/7658-1/","reference_id":"USN-7658-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7658-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/77200?format=json","purl":"pkg:composer/drupal/core@8.7.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.7.14"},{"url":"http://public2.vulnerablecode.io/api/packages/249828?format=json","purl":"pkg:composer/drupal/core@8.8.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.0-alpha1"},{"url":"http://public2.vulnerablecode.io/api/packages/77201?format=json","purl":"pkg:composer/drupal/core@8.8.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-9rmk-e8zd-9bcw"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-phwu-rdm2-ufhr"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-sg4r-hncm-dqcq"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-vz31-7246-aken"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-x783-ggg8-auck"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"},{"vulnerability":"VCID-zr84-4jzv-2fd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.6"},{"url":"http://public2.vulnerablecode.io/api/packages/253814?format=json","purl":"pkg:composer/drupal/core@8.9.0-beta1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.9.0-beta1"}],"aliases":["CVE-2020-11023","GHSA-jpcq-cgw6-v4j6"],"risk_score":10.0,"exploitability":"2.0","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vjrr-h9sh-3bcu"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41563?format=json","vulnerability_id":"VCID-wsv7-je8g-sqet","summary":"Drupal core Unrestricted Upload of File with Dangerous Type\nDrupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13671","reference_id":"","reference_type":"","scores":[{"value":"0.04504","scoring_system":"epss","scoring_elements":"0.89339","published_at":"2026-06-08T12:55:00Z"},{"value":"0.04504","scoring_system":"epss","scoring_elements":"0.8934","published_at":"2026-06-06T12:55:00Z"},{"value":"0.04504","scoring_system":"epss","scoring_elements":"0.89338","published_at":"2026-06-05T12:55:00Z"},{"value":"0.04504","scoring_system":"epss","scoring_elements":"0.8932","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-13671"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT"},{"reference_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-13671","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-13671"},{"reference_url":"https://www.drupal.org/sa-core-2020-012","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Attend","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:38:31Z/"}],"url":"https://www.drupal.org/sa-core-2020-012"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437/","reference_id":"5KSFM672XW3X6BR7TVKRD63SLZGKK437","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Attend","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:38:31Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5KSFM672XW3X6BR7TVKRD63SLZGKK437/"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13671","reference_id":"CVE-2020-13671","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13671"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2020-13671.yaml","reference_id":"CVE-2020-13671.YAML","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2020-13671.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2020-13671.yaml","reference_id":"CVE-2020-13671.YAML","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2020-13671.yaml"},{"reference_url":"https://github.com/advisories/GHSA-68jc-v27h-vhmw","reference_id":"GHSA-68jc-v27h-vhmw","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-68jc-v27h-vhmw"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT/","reference_id":"KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Attend","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:38:31Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWM4CTMEGAC4I2CHYNJVSROY4CVXVEUT/"},{"reference_url":"https://usn.ubuntu.com/6981-1/","reference_id":"USN-6981-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6981-1/"},{"reference_url":"https://usn.ubuntu.com/6981-2/","reference_id":"USN-6981-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6981-2/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/59269?format=json","purl":"pkg:composer/drupal/core@8.8.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.8.11"},{"url":"http://public2.vulnerablecode.io/api/packages/59268?format=json","purl":"pkg:composer/drupal/core@8.9.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-67da-qxh5-aydx"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.9.9"},{"url":"http://public2.vulnerablecode.io/api/packages/59267?format=json","purl":"pkg:composer/drupal/core@9.0.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-54qh-fz2a-cyh6"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-67da-qxh5-aydx"},{"vulnerability":"VCID-6x4v-da7x-uyhh"},{"vulnerability":"VCID-9dfs-rpqy-6kfa"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-b266-wste-eqh6"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bge7-rqsx-gfee"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-hkch-a5yn-jyg1"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-qwge-qrwn-1faj"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-xv4d-ped2-4udz"},{"vulnerability":"VCID-yq4q-hydz-vuga"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.0.8"}],"aliases":["CVE-2020-13671","GHSA-68jc-v27h-vhmw"],"risk_score":10.0,"exploitability":"2.0","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wsv7-je8g-sqet"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/48411?format=json","vulnerability_id":"VCID-yq4q-hydz-vuga","summary":"Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection. This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-13081","reference_id":"","reference_type":"","scores":[{"value":"0.00135","scoring_system":"epss","scoring_elements":"0.33104","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00135","scoring_system":"epss","scoring_elements":"0.33035","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00135","scoring_system":"epss","scoring_elements":"0.33067","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00135","scoring_system":"epss","scoring_elements":"0.33091","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-13081"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N"},{"value":"4.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://www.drupal.org/sa-core-2025-006","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N"},{"value":"4.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-11-19T04:55:20Z/"}],"url":"https://www.drupal.org/sa-core-2025-006"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13081","reference_id":"CVE-2025-13081","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N"},{"value":"4.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13081"},{"reference_url":"https://github.com/advisories/GHSA-m6vv-vcj8-w8m7","reference_id":"GHSA-m6vv-vcj8-w8m7","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-m6vv-vcj8-w8m7"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/71441?format=json","purl":"pkg:composer/drupal/core@10.4.9","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.4.9"},{"url":"http://public2.vulnerablecode.io/api/packages/71442?format=json","purl":"pkg:composer/drupal/core@10.5.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@10.5.6"},{"url":"http://public2.vulnerablecode.io/api/packages/71443?format=json","purl":"pkg:composer/drupal/core@11.1.9","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.1.9"},{"url":"http://public2.vulnerablecode.io/api/packages/71444?format=json","purl":"pkg:composer/drupal/core@11.2.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@11.2.8"}],"aliases":["CVE-2025-13081","GHSA-m6vv-vcj8-w8m7"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yq4q-hydz-vuga"}],"fixing_vulnerabilities":[],"risk_score":"10.0","resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.7.4"}