Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/%40seafile/sdoc-editor@2.0.73
Typenpm
Namespace@seafile
Namesdoc-editor
Version2.0.73
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.0.209
Latest_non_vulnerable_version3.0.75
Affected_by_vulnerabilities
0
url VCID-1wna-7azv-hbf2
vulnerability_id VCID-1wna-7azv-hbf2
summary Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc (sdoc) editor. The application fails to properly sanitize WebSocket messages regarding document structure updates. This allows authenticated remote attackers to inject malicious JavaScript payloads via the src attribute of embedded Excalidraw whiteboards or the href attribute of anchor tags
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-30587.json
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-30587.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-30587
reference_id
reference_type
scores
0
value 0.00066
scoring_system epss
scoring_elements 0.20668
published_at 2026-06-11T12:55:00Z
1
value 0.00066
scoring_system epss
scoring_elements 0.20838
published_at 2026-06-14T12:55:00Z
2
value 0.00066
scoring_system epss
scoring_elements 0.20862
published_at 2026-06-13T12:55:00Z
3
value 0.00066
scoring_system epss
scoring_elements 0.20842
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-30587
2
reference_url https://github.com/haiwen/seadoc-editor
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/haiwen/seadoc-editor
3
reference_url https://manual.seafile.com/12.0/changelog/changelog-for-seafile-professional-server
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://manual.seafile.com/12.0/changelog/changelog-for-seafile-professional-server
4
reference_url https://manual.seafile.com/13.0/changelog/changelog-for-seafile-professional-server
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://manual.seafile.com/13.0/changelog/changelog-for-seafile-professional-server
5
reference_url https://manual.seafile.com/13.0/changelog/server-changelog
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://manual.seafile.com/13.0/changelog/server-changelog
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-30587
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-30587
7
reference_url https://gist.github.com/gabdevele/1b7e30ab367b26042fa32f45aa12ce2f
reference_id 1b7e30ab367b26042fa32f45aa12ce2f
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-27T19:39:14Z/
url https://gist.github.com/gabdevele/1b7e30ab367b26042fa32f45aa12ce2f
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2451404
reference_id 2451404
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2451404
9
reference_url https://github.com/haiwen/seahub/commit/4c5301747bdb84c64b2f2b3230417df2d1cc8987
reference_id 4c5301747bdb84c64b2f2b3230417df2d1cc8987
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-27T19:39:14Z/
url https://github.com/haiwen/seahub/commit/4c5301747bdb84c64b2f2b3230417df2d1cc8987
10
reference_url https://github.com/haiwen/seadoc-editor/commit/8fa988aaede072b2ae073d1b2edcb2fc691423b2
reference_id 8fa988aaede072b2ae073d1b2edcb2fc691423b2
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-27T19:39:14Z/
url https://github.com/haiwen/seadoc-editor/commit/8fa988aaede072b2ae073d1b2edcb2fc691423b2
11
reference_url https://manual.seafile.com/12.0/changelog/changelog-for-seafile-professional-server/
reference_id changelog-for-seafile-professional-server
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-27T19:39:14Z/
url https://manual.seafile.com/12.0/changelog/changelog-for-seafile-professional-server/
12
reference_url https://manual.seafile.com/13.0/changelog/changelog-for-seafile-professional-server/
reference_id changelog-for-seafile-professional-server
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-27T19:39:14Z/
url https://manual.seafile.com/13.0/changelog/changelog-for-seafile-professional-server/
13
reference_url https://github.com/advisories/GHSA-rqj3-x344-qvxc
reference_id GHSA-rqj3-x344-qvxc
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rqj3-x344-qvxc
14
reference_url https://manual.seafile.com/13.0/changelog/server-changelog/
reference_id server-changelog
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-27T19:39:14Z/
url https://manual.seafile.com/13.0/changelog/server-changelog/
fixed_packages
0
url pkg:npm/%40seafile/sdoc-editor@2.0.209
purl pkg:npm/%40seafile/sdoc-editor@2.0.209
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540seafile/sdoc-editor@2.0.209
1
url pkg:npm/%40seafile/sdoc-editor@3.0.75
purl pkg:npm/%40seafile/sdoc-editor@3.0.75
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540seafile/sdoc-editor@3.0.75
aliases CVE-2026-30587, GHSA-rqj3-x344-qvxc
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1wna-7azv-hbf2
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/%2540seafile/sdoc-editor@2.0.73