Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/starcitizentools/tabber-neue@2.7.2
Typecomposer
Namespacestarcitizentools
Nametabber-neue
Version2.7.2
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version3.1.1
Latest_non_vulnerable_version3.1.1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-cb3a-wtdm-8bc1
vulnerability_id VCID-cb3a-wtdm-8bc1
summary 
Extension:TabberNeue vulnerable to Cross-site Scripting
There are several sources of arbitrary, unescaped user input being used to construct HTML, which allows any user that can edit pages or otherwise render wikitext to XSS other users.

> Edit: Only the first XSS can be reproduced in production.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-21612
reference_id
reference_type
scores
0
value 0.00258
scoring_system epss
scoring_elements 0.49448
published_at 2026-06-06T12:55:00Z
1
value 0.00258
scoring_system epss
scoring_elements 0.49413
published_at 2026-06-09T12:55:00Z
2
value 0.00258
scoring_system epss
scoring_elements 0.49401
published_at 2026-06-08T12:55:00Z
3
value 0.00258
scoring_system epss
scoring_elements 0.4943
published_at 2026-06-07T12:55:00Z
4
value 0.00258
scoring_system epss
scoring_elements 0.49438
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-21612
1
reference_url https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue
2
reference_url https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/commit/d8c3db4e5935476e496d979fb01f775d3d3282e6
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-01-06T16:51:40Z/
url https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/commit/d8c3db4e5935476e496d979fb01f775d3d3282e6
3
reference_url https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/commit/f229cab099c69006e25d4bad3579954e481dc566
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-01-06T16:51:40Z/
url https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/commit/f229cab099c69006e25d4bad3579954e481dc566
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-21612
reference_id CVE-2025-21612
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-21612
5
reference_url https://github.com/advisories/GHSA-4x6x-8rm8-c37j
reference_id GHSA-4x6x-8rm8-c37j
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4x6x-8rm8-c37j
6
reference_url https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/security/advisories/GHSA-4x6x-8rm8-c37j
reference_id GHSA-4x6x-8rm8-c37j
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-01-06T16:51:40Z/
url https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/security/advisories/GHSA-4x6x-8rm8-c37j
fixed_packages
0
url pkg:composer/starcitizentools/tabber-neue@2.7.2
purl pkg:composer/starcitizentools/tabber-neue@2.7.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/starcitizentools/tabber-neue@2.7.2
aliases CVE-2025-21612, GHSA-4x6x-8rm8-c37j
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cb3a-wtdm-8bc1
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/starcitizentools/tabber-neue@2.7.2