Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-7ryv-jjw4-b7gh
Summary
Arbitrary Code Execution in Cookie Serialization
The default serialization used by Plug session may result in code execution
  in certain situations. Keep in mind, however, the session cookie is signed
  and this attack can only be exploited if the attacker has access to your
  secret key as well as your signing/encryption salts. We recommend users to
  change their secret key base and salts if they suspect they have been leaked,
  regardless of this vulnerability.
Aliases
0
alias CVE-2017-1000053
1
alias GHSA-5v4m-c73v-c7gq
Fixed_packages
0
url pkg:hex/plug@1.0.4
purl pkg:hex/plug@1.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.0.4
1
url pkg:hex/plug@1.1.7
purl pkg:hex/plug@1.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.1.7
2
url pkg:hex/plug@1.2.3
purl pkg:hex/plug@1.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.2.3
3
url pkg:hex/plug@1.3.2
purl pkg:hex/plug@1.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.3.2
Affected_packages
0
url pkg:hex/plug@0.4.1
purl pkg:hex/plug@0.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.4.1
1
url pkg:hex/plug@0.4.2
purl pkg:hex/plug@0.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.4.2
2
url pkg:hex/plug@0.4.3
purl pkg:hex/plug@0.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.4.3
3
url pkg:hex/plug@0.4.4
purl pkg:hex/plug@0.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.4.4
4
url pkg:hex/plug@0.5.0
purl pkg:hex/plug@0.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.5.0
5
url pkg:hex/plug@0.5.1
purl pkg:hex/plug@0.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.5.1
6
url pkg:hex/plug@0.5.2
purl pkg:hex/plug@0.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.5.2
7
url pkg:hex/plug@0.5.3
purl pkg:hex/plug@0.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.5.3
8
url pkg:hex/plug@0.6.0
purl pkg:hex/plug@0.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.6.0
9
url pkg:hex/plug@0.7.0
purl pkg:hex/plug@0.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.7.0
10
url pkg:hex/plug@0.8.0
purl pkg:hex/plug@0.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.8.0
11
url pkg:hex/plug@0.8.1
purl pkg:hex/plug@0.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.8.1
12
url pkg:hex/plug@0.8.2
purl pkg:hex/plug@0.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.8.2
13
url pkg:hex/plug@0.8.3
purl pkg:hex/plug@0.8.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.8.3
14
url pkg:hex/plug@0.8.4
purl pkg:hex/plug@0.8.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.8.4
15
url pkg:hex/plug@0.9.0
purl pkg:hex/plug@0.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.9.0
16
url pkg:hex/plug@0.10.0
purl pkg:hex/plug@0.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.10.0
17
url pkg:hex/plug@0.11.0
purl pkg:hex/plug@0.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.11.0
18
url pkg:hex/plug@0.11.1
purl pkg:hex/plug@0.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.11.1
19
url pkg:hex/plug@0.11.2
purl pkg:hex/plug@0.11.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.11.2
20
url pkg:hex/plug@0.11.3
purl pkg:hex/plug@0.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.11.3
21
url pkg:hex/plug@0.12.0
purl pkg:hex/plug@0.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.12.0
22
url pkg:hex/plug@0.12.1
purl pkg:hex/plug@0.12.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.12.1
23
url pkg:hex/plug@0.12.2
purl pkg:hex/plug@0.12.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.12.2
24
url pkg:hex/plug@0.13.0
purl pkg:hex/plug@0.13.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.13.0
25
url pkg:hex/plug@0.13.1
purl pkg:hex/plug@0.13.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.13.1
26
url pkg:hex/plug@0.14.0
purl pkg:hex/plug@0.14.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@0.14.0
27
url pkg:hex/plug@1.0.0
purl pkg:hex/plug@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.0.0
28
url pkg:hex/plug@1.0.1
purl pkg:hex/plug@1.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.0.1
29
url pkg:hex/plug@1.0.2
purl pkg:hex/plug@1.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.0.2
30
url pkg:hex/plug@1.0.3
purl pkg:hex/plug@1.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.0.3
31
url pkg:hex/plug@1.1.0
purl pkg:hex/plug@1.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.1.0
32
url pkg:hex/plug@1.1.1
purl pkg:hex/plug@1.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.1.1
33
url pkg:hex/plug@1.1.2
purl pkg:hex/plug@1.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.1.2
34
url pkg:hex/plug@1.1.3
purl pkg:hex/plug@1.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.1.3
35
url pkg:hex/plug@1.1.4
purl pkg:hex/plug@1.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.1.4
36
url pkg:hex/plug@1.1.5
purl pkg:hex/plug@1.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.1.5
37
url pkg:hex/plug@1.1.6
purl pkg:hex/plug@1.1.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.1.6
38
url pkg:hex/plug@1.2.0-rc.0
purl pkg:hex/plug@1.2.0-rc.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.2.0-rc.0
39
url pkg:hex/plug@1.2.0
purl pkg:hex/plug@1.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.2.0
40
url pkg:hex/plug@1.2.1
purl pkg:hex/plug@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.2.1
41
url pkg:hex/plug@1.2.2
purl pkg:hex/plug@1.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.2.2
42
url pkg:hex/plug@1.3.0
purl pkg:hex/plug@1.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.3.0
43
url pkg:hex/plug@1.3.1
purl pkg:hex/plug@1.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ryv-jjw4-b7gh
1
vulnerability VCID-dp5c-pz39-ckhp
2
vulnerability VCID-x7su-wxws-a3gz
resource_url http://public2.vulnerablecode.io/packages/pkg:hex/plug@1.3.1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-1000053
reference_id
reference_type
scores
0
value 0.01075
scoring_system epss
scoring_elements 0.78131
published_at 2026-06-04T12:55:00Z
1
value 0.01075
scoring_system epss
scoring_elements 0.78164
published_at 2026-06-06T12:55:00Z
2
value 0.01075
scoring_system epss
scoring_elements 0.78157
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-1000053
1
reference_url https://elixirforum.com/t/security-releases-for-plug/3913
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://elixirforum.com/t/security-releases-for-plug/3913
2
reference_url https://elixirforum.com/t/static-and-session-security-fixes-for-plug/3913
reference_id
reference_type
scores
url https://elixirforum.com/t/static-and-session-security-fixes-for-plug/3913
3
reference_url https://github.com/elixir-plug/plug
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/elixir-plug/plug
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-1000053
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-1000053
Weaknesses
0
cwe_id 502
name Deserialization of Untrusted Data
description The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-7ryv-jjw4-b7gh