{"url":"http://public2.vulnerablecode.io/api/packages/94737?format=json","purl":"pkg:deb/debian/mediawiki@1:1.35.0-1?distro=trixie","type":"deb","namespace":"debian","name":"mediawiki","version":"1:1.35.0-1","qualifiers":{"distro":"trixie"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"0","latest_non_vulnerable_version":"1:1.43.8+dfsg-2","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/188707?format=json","vulnerability_id":"VCID-7gbx-7n2z-5bha","summary":"security update","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828"},{"reference_url":"https://gerrit.wikimedia.org/g/mediawiki/core/+/ad4a3ba45fb955aa8c0eb3c83809b16b40a498b9/includes/specials/SpecialContributions.php#592","reference_id":"","reference_type":"","scores":[],"url":"https://gerrit.wikimedia.org/g/mediawiki/core/+/ad4a3ba45fb955aa8c0eb3c83809b16b40a498b9/includes/specials/SpecialContributions.php#592"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6"},{"reference_url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html"},{"reference_url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html"},{"reference_url":"https://phabricator.wikimedia.org/T255918","reference_id":"","reference_type":"","scores":[],"url":"https://phabricator.wikimedia.org/T255918"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25812","reference_id":"CVE-2020-25812","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25812"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25812.yaml","reference_id":"CVE-2020-25812.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25812.yaml"},{"reference_url":"https://github.com/advisories/GHSA-rj9p-8jxj-2ch4","reference_id":"GHSA-rj9p-8jxj-2ch4","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-rj9p-8jxj-2ch4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/94737?format=json","purl":"pkg:deb/debian/mediawiki@1:1.35.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94678?format=json","purl":"pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-668s-gdwc-5ycr"},{"vulnerability":"VCID-dauk-k2fs-63dy"},{"vulnerability":"VCID-k4gf-gky5-nbfk"},{"vulnerability":"VCID-n7dk-8esv-abde"},{"vulnerability":"VCID-nt78-urhw-7fbv"},{"vulnerability":"VCID-q3rz-xsy4-kkhh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94676?format=json","purl":"pkg:deb/debian/mediawiki@1:1.39.17-1%2Bdeb12u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-k4gf-gky5-nbfk"},{"vulnerability":"VCID-n7dk-8esv-abde"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1%252Bdeb12u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94680?format=json","purl":"pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-1~deb13u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-1~deb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94679?format=json","purl":"pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-2%3Fdistro=trixie"}],"aliases":["CVE-2020-25812","GHSA-rj9p-8jxj-2ch4"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7gbx-7n2z-5bha"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/207917?format=json","vulnerability_id":"VCID-drfa-f7ht-pbfp","summary":"An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped() instead of text().","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25815","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25815"},{"reference_url":"https://gerrit.wikimedia.org/g/mediawiki/core/+/ec76e14be658187544f07c1a249a047e1a75eaf8/includes/logging/LogEventsList.php#214","reference_id":"","reference_type":"","scores":[],"url":"https://gerrit.wikimedia.org/g/mediawiki/core/+/ec76e14be658187544f07c1a249a047e1a75eaf8/includes/logging/LogEventsList.php#214"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6"},{"reference_url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html"},{"reference_url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html"},{"reference_url":"https://phabricator.wikimedia.org/T256171","reference_id":"","reference_type":"","scores":[],"url":"https://phabricator.wikimedia.org/T256171"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25815","reference_id":"CVE-2020-25815","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25815"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25815.yaml","reference_id":"CVE-2020-25815.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25815.yaml"},{"reference_url":"https://github.com/advisories/GHSA-2f58-vf6g-6p8x","reference_id":"GHSA-2f58-vf6g-6p8x","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-2f58-vf6g-6p8x"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/94737?format=json","purl":"pkg:deb/debian/mediawiki@1:1.35.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94678?format=json","purl":"pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-668s-gdwc-5ycr"},{"vulnerability":"VCID-dauk-k2fs-63dy"},{"vulnerability":"VCID-k4gf-gky5-nbfk"},{"vulnerability":"VCID-n7dk-8esv-abde"},{"vulnerability":"VCID-nt78-urhw-7fbv"},{"vulnerability":"VCID-q3rz-xsy4-kkhh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94676?format=json","purl":"pkg:deb/debian/mediawiki@1:1.39.17-1%2Bdeb12u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-k4gf-gky5-nbfk"},{"vulnerability":"VCID-n7dk-8esv-abde"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1%252Bdeb12u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94680?format=json","purl":"pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-1~deb13u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-1~deb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94679?format=json","purl":"pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-2%3Fdistro=trixie"}],"aliases":["CVE-2020-25815","GHSA-2f58-vf6g-6p8x"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-drfa-f7ht-pbfp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/188709?format=json","vulnerability_id":"VCID-e7gs-nyf7-k3ee","summary":"security update","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6"},{"reference_url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html"},{"reference_url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html"},{"reference_url":"https://phabricator.wikimedia.org/T86738","reference_id":"","reference_type":"","scores":[],"url":"https://phabricator.wikimedia.org/T86738"},{"reference_url":"https://www.mediawiki.org/wiki/ResourceLoader/Core_modules#mediawiki.jqueryMsg","reference_id":"","reference_type":"","scores":[],"url":"https://www.mediawiki.org/wiki/ResourceLoader/Core_modules#mediawiki.jqueryMsg"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25814","reference_id":"CVE-2020-25814","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25814"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25814.yaml","reference_id":"CVE-2020-25814.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25814.yaml"},{"reference_url":"https://github.com/advisories/GHSA-4vr7-m8p8-434h","reference_id":"GHSA-4vr7-m8p8-434h","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-4vr7-m8p8-434h"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/94737?format=json","purl":"pkg:deb/debian/mediawiki@1:1.35.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94678?format=json","purl":"pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-668s-gdwc-5ycr"},{"vulnerability":"VCID-dauk-k2fs-63dy"},{"vulnerability":"VCID-k4gf-gky5-nbfk"},{"vulnerability":"VCID-n7dk-8esv-abde"},{"vulnerability":"VCID-nt78-urhw-7fbv"},{"vulnerability":"VCID-q3rz-xsy4-kkhh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94676?format=json","purl":"pkg:deb/debian/mediawiki@1:1.39.17-1%2Bdeb12u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-k4gf-gky5-nbfk"},{"vulnerability":"VCID-n7dk-8esv-abde"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1%252Bdeb12u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94680?format=json","purl":"pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-1~deb13u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-1~deb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94679?format=json","purl":"pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-2%3Fdistro=trixie"}],"aliases":["CVE-2020-25814","GHSA-4vr7-m8p8-434h"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-e7gs-nyf7-k3ee"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/188711?format=json","vulnerability_id":"VCID-jyst-5hae-3bd7","summary":"security update","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6"},{"reference_url":"https://lists.wikimedia.org/pipermail/mediawiki-announce","reference_id":"","reference_type":"","scores":[],"url":"https://lists.wikimedia.org/pipermail/mediawiki-announce"},{"reference_url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html"},{"reference_url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html"},{"reference_url":"https://phabricator.wikimedia.org/T115888","reference_id":"","reference_type":"","scores":[],"url":"https://phabricator.wikimedia.org/T115888"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25828","reference_id":"CVE-2020-25828","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25828"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25828.yaml","reference_id":"CVE-2020-25828.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25828.yaml"},{"reference_url":"https://github.com/advisories/GHSA-h8qx-mj6v-2934","reference_id":"GHSA-h8qx-mj6v-2934","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-h8qx-mj6v-2934"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/94737?format=json","purl":"pkg:deb/debian/mediawiki@1:1.35.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94678?format=json","purl":"pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-668s-gdwc-5ycr"},{"vulnerability":"VCID-dauk-k2fs-63dy"},{"vulnerability":"VCID-k4gf-gky5-nbfk"},{"vulnerability":"VCID-n7dk-8esv-abde"},{"vulnerability":"VCID-nt78-urhw-7fbv"},{"vulnerability":"VCID-q3rz-xsy4-kkhh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94676?format=json","purl":"pkg:deb/debian/mediawiki@1:1.39.17-1%2Bdeb12u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-k4gf-gky5-nbfk"},{"vulnerability":"VCID-n7dk-8esv-abde"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1%252Bdeb12u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94680?format=json","purl":"pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-1~deb13u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-1~deb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94679?format=json","purl":"pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-2%3Fdistro=trixie"}],"aliases":["CVE-2020-25828","GHSA-h8qx-mj6v-2934"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-jyst-5hae-3bd7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/188708?format=json","vulnerability_id":"VCID-ns1r-9qty-aqen","summary":"security update","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6"},{"reference_url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html"},{"reference_url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html"},{"reference_url":"https://meta.wikimedia.org/wiki/Special:UserRights","reference_id":"","reference_type":"","scores":[],"url":"https://meta.wikimedia.org/wiki/Special:UserRights"},{"reference_url":"https://phabricator.wikimedia.org/T232568","reference_id":"","reference_type":"","scores":[],"url":"https://phabricator.wikimedia.org/T232568"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25813","reference_id":"CVE-2020-25813","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25813"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25813.yaml","reference_id":"CVE-2020-25813.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25813.yaml"},{"reference_url":"https://github.com/advisories/GHSA-c4rj-wrmq-52rj","reference_id":"GHSA-c4rj-wrmq-52rj","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-c4rj-wrmq-52rj"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/94737?format=json","purl":"pkg:deb/debian/mediawiki@1:1.35.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94678?format=json","purl":"pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-668s-gdwc-5ycr"},{"vulnerability":"VCID-dauk-k2fs-63dy"},{"vulnerability":"VCID-k4gf-gky5-nbfk"},{"vulnerability":"VCID-n7dk-8esv-abde"},{"vulnerability":"VCID-nt78-urhw-7fbv"},{"vulnerability":"VCID-q3rz-xsy4-kkhh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94676?format=json","purl":"pkg:deb/debian/mediawiki@1:1.39.17-1%2Bdeb12u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-k4gf-gky5-nbfk"},{"vulnerability":"VCID-n7dk-8esv-abde"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1%252Bdeb12u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94680?format=json","purl":"pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-1~deb13u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-1~deb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94679?format=json","purl":"pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-2%3Fdistro=trixie"}],"aliases":["CVE-2020-25813","GHSA-c4rj-wrmq-52rj"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ns1r-9qty-aqen"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/188710?format=json","vulnerability_id":"VCID-nsbz-typj-u7dj","summary":"security update","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6"},{"reference_url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html"},{"reference_url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html"},{"reference_url":"https://phabricator.wikimedia.org/T251661","reference_id":"","reference_type":"","scores":[],"url":"https://phabricator.wikimedia.org/T251661"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25827","reference_id":"CVE-2020-25827","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25827"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25827.yaml","reference_id":"CVE-2020-25827.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25827.yaml"},{"reference_url":"https://github.com/advisories/GHSA-rqvj-fc2x-99q6","reference_id":"GHSA-rqvj-fc2x-99q6","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-rqvj-fc2x-99q6"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/94737?format=json","purl":"pkg:deb/debian/mediawiki@1:1.35.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94678?format=json","purl":"pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-668s-gdwc-5ycr"},{"vulnerability":"VCID-dauk-k2fs-63dy"},{"vulnerability":"VCID-k4gf-gky5-nbfk"},{"vulnerability":"VCID-n7dk-8esv-abde"},{"vulnerability":"VCID-nt78-urhw-7fbv"},{"vulnerability":"VCID-q3rz-xsy4-kkhh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94676?format=json","purl":"pkg:deb/debian/mediawiki@1:1.39.17-1%2Bdeb12u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-k4gf-gky5-nbfk"},{"vulnerability":"VCID-n7dk-8esv-abde"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1%252Bdeb12u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94680?format=json","purl":"pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-1~deb13u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-1~deb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/94679?format=json","purl":"pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-2%3Fdistro=trixie"}],"aliases":["CVE-2020-25827","GHSA-rqvj-fc2x-99q6"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-nsbz-typj-u7dj"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.0-1%3Fdistro=trixie"}