{"url":"http://public2.vulnerablecode.io/api/packages/81494?format=json","purl":"pkg:composer/silverstripe/framework@3.6.5-rc1","type":"composer","namespace":"silverstripe","name":"framework","version":"3.6.5-rc1","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"4.3.5","latest_non_vulnerable_version":"5.2.16","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/340880?format=json","vulnerability_id":"VCID-9wms-djy3-x7fs","summary":"silverstripe/framework allows upload of dangerous file types","references":[{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2018-014-1.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2018-014-1.yaml"},{"reference_url":"https://github.com/silverstripe/silverstripe-framework","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/silverstripe/silverstripe-framework"},{"reference_url":"https://github.com/silverstripe/silverstripe-framework/commit/0408048653fafc52e02b4dbc6288e14e634ac613","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/silverstripe/silverstripe-framework/commit/0408048653fafc52e02b4dbc6288e14e634ac613"},{"reference_url":"https://www.silverstripe.org/download/security-releases/ss-2018-014","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.silverstripe.org/download/security-releases/ss-2018-014"},{"reference_url":"https://github.com/advisories/GHSA-vcg6-8fxc-x5cq","reference_id":"GHSA-vcg6-8fxc-x5cq","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-vcg6-8fxc-x5cq"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/81491?format=json","purl":"pkg:composer/silverstripe/framework@3.6.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3497-71mw-yqh8"},{"vulnerability":"VCID-4mg2-rjsn-qyfx"},{"vulnerability":"VCID-7kmy-8ht6-8fcw"},{"vulnerability":"VCID-9vwe-uejx-c3c5"},{"vulnerability":"VCID-k1aa-deyg-2kdg"},{"vulnerability":"VCID-k6ed-y2ud-wffu"},{"vulnerability":"VCID-m2bw-tabk-qyd8"},{"vulnerability":"VCID-x6g5-a61e-3khu"},{"vulnerability":"VCID-yxg1-dz91-ckgs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.6.6"},{"url":"http://public2.vulnerablecode.io/api/packages/81486?format=json","purl":"pkg:composer/silverstripe/framework@4.0.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3497-71mw-yqh8"},{"vulnerability":"VCID-4mg2-rjsn-qyfx"},{"vulnerability":"VCID-7kmy-8ht6-8fcw"},{"vulnerability":"VCID-9vwe-uejx-c3c5"},{"vulnerability":"VCID-jc9t-3hb5-z3g5"},{"vulnerability":"VCID-m2bw-tabk-qyd8"},{"vulnerability":"VCID-x6g5-a61e-3khu"},{"vulnerability":"VCID-yxg1-dz91-ckgs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/81488?format=json","purl":"pkg:composer/silverstripe/framework@4.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3497-71mw-yqh8"},{"vulnerability":"VCID-4mg2-rjsn-qyfx"},{"vulnerability":"VCID-7kmy-8ht6-8fcw"},{"vulnerability":"VCID-8bkg-xn4y-nydr"},{"vulnerability":"VCID-9vwe-uejx-c3c5"},{"vulnerability":"VCID-jc9t-3hb5-z3g5"},{"vulnerability":"VCID-m2bw-tabk-qyd8"},{"vulnerability":"VCID-x6g5-a61e-3khu"},{"vulnerability":"VCID-yxg1-dz91-ckgs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.1.1"}],"aliases":["GHSA-vcg6-8fxc-x5cq"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-9wms-djy3-x7fs"}],"fixing_vulnerabilities":[],"risk_score":"4.0","resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.6.5-rc1"}