Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-zpc9-qmnr-ckga
Summary
Aliases
0
alias CVE-2022-1471
1
alias GHSA-mjmj-j48q-9wg2
Fixed_packages
0
url pkg:maven/org.yaml/snakeyaml@2.0
purl pkg:maven/org.yaml/snakeyaml@2.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@2.0
Affected_packages
0
url pkg:maven/org.yaml/snakeyaml@1.4
purl pkg:maven/org.yaml/snakeyaml@1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.4
1
url pkg:maven/org.yaml/snakeyaml@1.5
purl pkg:maven/org.yaml/snakeyaml@1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.5
2
url pkg:maven/org.yaml/snakeyaml@1.6
purl pkg:maven/org.yaml/snakeyaml@1.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.6
3
url pkg:maven/org.yaml/snakeyaml@1.7
purl pkg:maven/org.yaml/snakeyaml@1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.7
4
url pkg:maven/org.yaml/snakeyaml@1.8
purl pkg:maven/org.yaml/snakeyaml@1.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.8
5
url pkg:maven/org.yaml/snakeyaml@1.9
purl pkg:maven/org.yaml/snakeyaml@1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.9
6
url pkg:maven/org.yaml/snakeyaml@1.10
purl pkg:maven/org.yaml/snakeyaml@1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.10
7
url pkg:maven/org.yaml/snakeyaml@1.11
purl pkg:maven/org.yaml/snakeyaml@1.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.11
8
url pkg:maven/org.yaml/snakeyaml@1.12
purl pkg:maven/org.yaml/snakeyaml@1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.12
9
url pkg:maven/org.yaml/snakeyaml@1.13
purl pkg:maven/org.yaml/snakeyaml@1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.13
10
url pkg:maven/org.yaml/snakeyaml@1.14
purl pkg:maven/org.yaml/snakeyaml@1.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.14
11
url pkg:maven/org.yaml/snakeyaml@1.15
purl pkg:maven/org.yaml/snakeyaml@1.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.15
12
url pkg:maven/org.yaml/snakeyaml@1.16
purl pkg:maven/org.yaml/snakeyaml@1.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.16
13
url pkg:maven/org.yaml/snakeyaml@1.17
purl pkg:maven/org.yaml/snakeyaml@1.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.17
14
url pkg:maven/org.yaml/snakeyaml@1.18
purl pkg:maven/org.yaml/snakeyaml@1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.18
15
url pkg:maven/org.yaml/snakeyaml@1.19
purl pkg:maven/org.yaml/snakeyaml@1.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.19
16
url pkg:maven/org.yaml/snakeyaml@1.20
purl pkg:maven/org.yaml/snakeyaml@1.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.20
17
url pkg:maven/org.yaml/snakeyaml@1.21
purl pkg:maven/org.yaml/snakeyaml@1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.21
18
url pkg:maven/org.yaml/snakeyaml@1.22
purl pkg:maven/org.yaml/snakeyaml@1.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.22
19
url pkg:maven/org.yaml/snakeyaml@1.23
purl pkg:maven/org.yaml/snakeyaml@1.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.23
20
url pkg:maven/org.yaml/snakeyaml@1.24
purl pkg:maven/org.yaml/snakeyaml@1.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.24
21
url pkg:maven/org.yaml/snakeyaml@1.25
purl pkg:maven/org.yaml/snakeyaml@1.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d22y-27n1-nkdb
1
vulnerability VCID-f9a3-vz93-zqcq
2
vulnerability VCID-gvc5-rtu7-eueb
3
vulnerability VCID-kde4-epw8-w7c8
4
vulnerability VCID-mdgs-etkz-abgd
5
vulnerability VCID-wujp-7kc4-2ycb
6
vulnerability VCID-xvj8-jwkd-6ubd
7
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.25
22
url pkg:maven/org.yaml/snakeyaml@1.26
purl pkg:maven/org.yaml/snakeyaml@1.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-f9a3-vz93-zqcq
1
vulnerability VCID-gvc5-rtu7-eueb
2
vulnerability VCID-kde4-epw8-w7c8
3
vulnerability VCID-mdgs-etkz-abgd
4
vulnerability VCID-wujp-7kc4-2ycb
5
vulnerability VCID-xvj8-jwkd-6ubd
6
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.26
23
url pkg:maven/org.yaml/snakeyaml@1.27
purl pkg:maven/org.yaml/snakeyaml@1.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-f9a3-vz93-zqcq
1
vulnerability VCID-gvc5-rtu7-eueb
2
vulnerability VCID-kde4-epw8-w7c8
3
vulnerability VCID-mdgs-etkz-abgd
4
vulnerability VCID-wujp-7kc4-2ycb
5
vulnerability VCID-xvj8-jwkd-6ubd
6
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.27
24
url pkg:maven/org.yaml/snakeyaml@1.28
purl pkg:maven/org.yaml/snakeyaml@1.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-f9a3-vz93-zqcq
1
vulnerability VCID-gvc5-rtu7-eueb
2
vulnerability VCID-kde4-epw8-w7c8
3
vulnerability VCID-mdgs-etkz-abgd
4
vulnerability VCID-wujp-7kc4-2ycb
5
vulnerability VCID-xvj8-jwkd-6ubd
6
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.28
25
url pkg:maven/org.yaml/snakeyaml@1.29
purl pkg:maven/org.yaml/snakeyaml@1.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-f9a3-vz93-zqcq
1
vulnerability VCID-gvc5-rtu7-eueb
2
vulnerability VCID-kde4-epw8-w7c8
3
vulnerability VCID-mdgs-etkz-abgd
4
vulnerability VCID-wujp-7kc4-2ycb
5
vulnerability VCID-xvj8-jwkd-6ubd
6
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.29
26
url pkg:maven/org.yaml/snakeyaml@1.30
purl pkg:maven/org.yaml/snakeyaml@1.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-f9a3-vz93-zqcq
1
vulnerability VCID-gvc5-rtu7-eueb
2
vulnerability VCID-kde4-epw8-w7c8
3
vulnerability VCID-mdgs-etkz-abgd
4
vulnerability VCID-wujp-7kc4-2ycb
5
vulnerability VCID-xvj8-jwkd-6ubd
6
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.30
27
url pkg:maven/org.yaml/snakeyaml@1.31
purl pkg:maven/org.yaml/snakeyaml@1.31
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kde4-epw8-w7c8
1
vulnerability VCID-wujp-7kc4-2ycb
2
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.31
28
url pkg:maven/org.yaml/snakeyaml@1.32
purl pkg:maven/org.yaml/snakeyaml@1.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.32
29
url pkg:maven/org.yaml/snakeyaml@1.33
purl pkg:maven/org.yaml/snakeyaml@1.33
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.33
30
url pkg:rpm/redhat/candlepin@4.2.13-1?arch=el8sat
purl pkg:rpm/redhat/candlepin@4.2.13-1?arch=el8sat
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4vx9-twgz-xbcs
1
vulnerability VCID-6r2h-5gfg-wfgq
2
vulnerability VCID-92cp-kc76-5yfu
3
vulnerability VCID-9gek-hwbv-87hc
4
vulnerability VCID-f9a3-vz93-zqcq
5
vulnerability VCID-gvc5-rtu7-eueb
6
vulnerability VCID-kde4-epw8-w7c8
7
vulnerability VCID-mdgs-etkz-abgd
8
vulnerability VCID-rg6h-uhep-kyce
9
vulnerability VCID-ts5d-j1mw-dqbg
10
vulnerability VCID-xvj8-jwkd-6ubd
11
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/candlepin@4.2.13-1%3Farch=el8sat
31
url pkg:rpm/redhat/eap7-jackson-modules-java8@2.10.4-2.redhat_00004.1?arch=el7eap
purl pkg:rpm/redhat/eap7-jackson-modules-java8@2.10.4-2.redhat_00004.1?arch=el7eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b3e-49vk-27h2
1
vulnerability VCID-5awv-7w7c-sfgn
2
vulnerability VCID-8ra7-fpsb-5ye8
3
vulnerability VCID-9gek-hwbv-87hc
4
vulnerability VCID-aauw-24tq-nfdc
5
vulnerability VCID-gygt-yqzu-tqgd
6
vulnerability VCID-mpz4-6qzq-9ycm
7
vulnerability VCID-pe9e-5tw4-rfbf
8
vulnerability VCID-rg6h-uhep-kyce
9
vulnerability VCID-t2ns-jx1q-2fek
10
vulnerability VCID-ts5d-j1mw-dqbg
11
vulnerability VCID-wauh-sfrw-mbff
12
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jackson-modules-java8@2.10.4-2.redhat_00004.1%3Farch=el7eap
32
url pkg:rpm/redhat/eap7-resteasy@3.0.27-1.Final_redhat_00001.1.ep7?arch=el7
purl pkg:rpm/redhat/eap7-resteasy@3.0.27-1.Final_redhat_00001.1.ep7?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4n15-13mm-sqfr
1
vulnerability VCID-5awv-7w7c-sfgn
2
vulnerability VCID-7zr2-u3f1-jqd1
3
vulnerability VCID-8ra7-fpsb-5ye8
4
vulnerability VCID-9gek-hwbv-87hc
5
vulnerability VCID-9wy4-n4u7-pycp
6
vulnerability VCID-aauw-24tq-nfdc
7
vulnerability VCID-dach-1bmd-67eb
8
vulnerability VCID-djr3-bksw-ruc5
9
vulnerability VCID-e865-k4uj-u7dc
10
vulnerability VCID-gygt-yqzu-tqgd
11
vulnerability VCID-pe9e-5tw4-rfbf
12
vulnerability VCID-rg6h-uhep-kyce
13
vulnerability VCID-t2ns-jx1q-2fek
14
vulnerability VCID-ts5d-j1mw-dqbg
15
vulnerability VCID-wauh-sfrw-mbff
16
vulnerability VCID-yn5b-b6qq-xffs
17
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-resteasy@3.0.27-1.Final_redhat_00001.1.ep7%3Farch=el7
33
url pkg:rpm/redhat/eap7-resteasy@3.11.6-1.Final_redhat_00001.1?arch=el7eap
purl pkg:rpm/redhat/eap7-resteasy@3.11.6-1.Final_redhat_00001.1?arch=el7eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b3e-49vk-27h2
1
vulnerability VCID-5awv-7w7c-sfgn
2
vulnerability VCID-8ra7-fpsb-5ye8
3
vulnerability VCID-9gek-hwbv-87hc
4
vulnerability VCID-aauw-24tq-nfdc
5
vulnerability VCID-gygt-yqzu-tqgd
6
vulnerability VCID-mpz4-6qzq-9ycm
7
vulnerability VCID-pe9e-5tw4-rfbf
8
vulnerability VCID-rg6h-uhep-kyce
9
vulnerability VCID-t2ns-jx1q-2fek
10
vulnerability VCID-ts5d-j1mw-dqbg
11
vulnerability VCID-wauh-sfrw-mbff
12
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-resteasy@3.11.6-1.Final_redhat_00001.1%3Farch=el7eap
34
url pkg:rpm/redhat/eap7-snakeyaml@1.33.0-1.SP1_redhat_00001.1?arch=el7eap
purl pkg:rpm/redhat/eap7-snakeyaml@1.33.0-1.SP1_redhat_00001.1?arch=el7eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b3e-49vk-27h2
1
vulnerability VCID-5awv-7w7c-sfgn
2
vulnerability VCID-aauw-24tq-nfdc
3
vulnerability VCID-gygt-yqzu-tqgd
4
vulnerability VCID-mpz4-6qzq-9ycm
5
vulnerability VCID-pe9e-5tw4-rfbf
6
vulnerability VCID-t2ns-jx1q-2fek
7
vulnerability VCID-ts5d-j1mw-dqbg
8
vulnerability VCID-wauh-sfrw-mbff
9
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-snakeyaml@1.33.0-1.SP1_redhat_00001.1%3Farch=el7eap
35
url pkg:rpm/redhat/eap7-snakeyaml@1.33.0-1.SP1_redhat_00001.1.ep7?arch=el7
purl pkg:rpm/redhat/eap7-snakeyaml@1.33.0-1.SP1_redhat_00001.1.ep7?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5awv-7w7c-sfgn
1
vulnerability VCID-8ra7-fpsb-5ye8
2
vulnerability VCID-aauw-24tq-nfdc
3
vulnerability VCID-pe9e-5tw4-rfbf
4
vulnerability VCID-ts5d-j1mw-dqbg
5
vulnerability VCID-wauh-sfrw-mbff
6
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-snakeyaml@1.33.0-1.SP1_redhat_00001.1.ep7%3Farch=el7
36
url pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-87j6-anzh-2uf1
1
vulnerability VCID-kde4-epw8-w7c8
2
vulnerability VCID-wdvr-ddjy-27as
3
vulnerability VCID-wujp-7kc4-2ycb
4
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1%3Farch=el8eap
37
url pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1?arch=el7eap
purl pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1?arch=el7eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-87j6-anzh-2uf1
1
vulnerability VCID-kde4-epw8-w7c8
2
vulnerability VCID-wdvr-ddjy-27as
3
vulnerability VCID-wujp-7kc4-2ycb
4
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1%3Farch=el7eap
38
url pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-87j6-anzh-2uf1
1
vulnerability VCID-kde4-epw8-w7c8
2
vulnerability VCID-wdvr-ddjy-27as
3
vulnerability VCID-wujp-7kc4-2ycb
4
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1%3Farch=el9eap
39
url pkg:rpm/redhat/jenkins-2-plugins@4.9.1675668922-1?arch=el8
purl pkg:rpm/redhat/jenkins-2-plugins@4.9.1675668922-1?arch=el8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1hvx-2h1t-n7hj
1
vulnerability VCID-24zg-76th-b7a9
2
vulnerability VCID-282p-1cbn-1ydr
3
vulnerability VCID-2ef9-4t7c-9kd6
4
vulnerability VCID-2gbh-nhbd-vyb3
5
vulnerability VCID-44sb-6uzy-3be8
6
vulnerability VCID-6edu-x9e7-mqg4
7
vulnerability VCID-6fdz-pavg-uydu
8
vulnerability VCID-79jf-4v34-5feg
9
vulnerability VCID-8drq-ax12-d7h5
10
vulnerability VCID-f9a3-vz93-zqcq
11
vulnerability VCID-kshy-a9qd-9ue3
12
vulnerability VCID-pae5-c62h-q7a9
13
vulnerability VCID-pe9e-5tw4-rfbf
14
vulnerability VCID-r8x8-fygj-77bn
15
vulnerability VCID-udcj-gpwk-uudj
16
vulnerability VCID-vftd-1z64-mba7
17
vulnerability VCID-vm4d-svqb-dfh6
18
vulnerability VCID-vyvx-hyzd-zkan
19
vulnerability VCID-wbwg-kc2b-4qhc
20
vulnerability VCID-xsy5-wuvz-juh6
21
vulnerability VCID-yw72-1mwb-bqdc
22
vulnerability VCID-zpc9-qmnr-ckga
23
vulnerability VCID-zwkg-gh5x-t7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins-2-plugins@4.9.1675668922-1%3Farch=el8
40
url pkg:rpm/redhat/jenkins-2-plugins@4.10.1675407676-1?arch=el8
purl pkg:rpm/redhat/jenkins-2-plugins@4.10.1675407676-1?arch=el8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins-2-plugins@4.10.1675407676-1%3Farch=el8
41
url pkg:rpm/redhat/jenkins-2-plugins@4.11.1683009941-1?arch=el8
purl pkg:rpm/redhat/jenkins-2-plugins@4.11.1683009941-1?arch=el8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-282p-1cbn-1ydr
1
vulnerability VCID-2ef9-4t7c-9kd6
2
vulnerability VCID-2gbh-nhbd-vyb3
3
vulnerability VCID-6edu-x9e7-mqg4
4
vulnerability VCID-6js7-4nr1-tfe9
5
vulnerability VCID-767j-pk7s-sfdd
6
vulnerability VCID-79jf-4v34-5feg
7
vulnerability VCID-f9a3-vz93-zqcq
8
vulnerability VCID-hhvt-b749-rub6
9
vulnerability VCID-pe9e-5tw4-rfbf
10
vulnerability VCID-ts5d-j1mw-dqbg
11
vulnerability VCID-udcj-gpwk-uudj
12
vulnerability VCID-ueg1-ww9r-u7gm
13
vulnerability VCID-vm4d-svqb-dfh6
14
vulnerability VCID-vyvx-hyzd-zkan
15
vulnerability VCID-wrx9-uc8e-9fch
16
vulnerability VCID-xsy5-wuvz-juh6
17
vulnerability VCID-yw72-1mwb-bqdc
18
vulnerability VCID-zpc9-qmnr-ckga
19
vulnerability VCID-zwkg-gh5x-t7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins-2-plugins@4.11.1683009941-1%3Farch=el8
42
url pkg:rpm/redhat/jenkins-2-plugins@4.11.1698299029-1?arch=el8
purl pkg:rpm/redhat/jenkins-2-plugins@4.11.1698299029-1?arch=el8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6js7-4nr1-tfe9
1
vulnerability VCID-ggkj-1b25-kyb9
2
vulnerability VCID-hhvt-b749-rub6
3
vulnerability VCID-ts5d-j1mw-dqbg
4
vulnerability VCID-ueg1-ww9r-u7gm
5
vulnerability VCID-wrx9-uc8e-9fch
6
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins-2-plugins@4.11.1698299029-1%3Farch=el8
43
url pkg:rpm/redhat/jenkins-2-plugins@4.11.1706516946-1?arch=el8
purl pkg:rpm/redhat/jenkins-2-plugins@4.11.1706516946-1?arch=el8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6js7-4nr1-tfe9
1
vulnerability VCID-6xxy-hbns-muak
2
vulnerability VCID-hhvt-b749-rub6
3
vulnerability VCID-ts5d-j1mw-dqbg
4
vulnerability VCID-ueg1-ww9r-u7gm
5
vulnerability VCID-wrx9-uc8e-9fch
6
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins-2-plugins@4.11.1706516946-1%3Farch=el8
44
url pkg:rpm/redhat/prometheus-jmx-exporter@0.12.0-9?arch=el8_7
purl pkg:rpm/redhat/prometheus-jmx-exporter@0.12.0-9?arch=el8_7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/prometheus-jmx-exporter@0.12.0-9%3Farch=el8_7
45
url pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1?arch=el9sso
purl pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1?arch=el9sso
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b3e-49vk-27h2
1
vulnerability VCID-486s-u7j8-83e2
2
vulnerability VCID-4ue8-9kcp-uqah
3
vulnerability VCID-6bhd-zdh5-5qgz
4
vulnerability VCID-6m6w-vs31-byea
5
vulnerability VCID-8ra7-fpsb-5ye8
6
vulnerability VCID-9gek-hwbv-87hc
7
vulnerability VCID-c2nr-hks8-4qg1
8
vulnerability VCID-ejyg-88gf-sfbh
9
vulnerability VCID-f9a3-vz93-zqcq
10
vulnerability VCID-fh9y-kdy5-guau
11
vulnerability VCID-g5u6-4zxh-8ucn
12
vulnerability VCID-gvc5-rtu7-eueb
13
vulnerability VCID-jp51-ftxv-4ud9
14
vulnerability VCID-kufg-z717-b7hm
15
vulnerability VCID-mdgs-etkz-abgd
16
vulnerability VCID-p8q4-rr16-6ycg
17
vulnerability VCID-pe9e-5tw4-rfbf
18
vulnerability VCID-pn4q-88ty-pbay
19
vulnerability VCID-qvs4-a8b6-2uht
20
vulnerability VCID-rg6h-uhep-kyce
21
vulnerability VCID-s53x-qyc6-bfcn
22
vulnerability VCID-t2ns-jx1q-2fek
23
vulnerability VCID-tyy7-1dkf-uufg
24
vulnerability VCID-v2tp-rt89-6ydw
25
vulnerability VCID-v9w8-12zc-9ycn
26
vulnerability VCID-vnt9-r111-33h3
27
vulnerability VCID-xvj8-jwkd-6ubd
28
vulnerability VCID-yb9d-mbgp-dfam
29
vulnerability VCID-zha3-5yra-sfae
30
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1%3Farch=el9sso
46
url pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1?arch=el7sso
purl pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1?arch=el7sso
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b3e-49vk-27h2
1
vulnerability VCID-486s-u7j8-83e2
2
vulnerability VCID-4ue8-9kcp-uqah
3
vulnerability VCID-6bhd-zdh5-5qgz
4
vulnerability VCID-6m6w-vs31-byea
5
vulnerability VCID-8ra7-fpsb-5ye8
6
vulnerability VCID-9gek-hwbv-87hc
7
vulnerability VCID-c2nr-hks8-4qg1
8
vulnerability VCID-ejyg-88gf-sfbh
9
vulnerability VCID-f9a3-vz93-zqcq
10
vulnerability VCID-fh9y-kdy5-guau
11
vulnerability VCID-g5u6-4zxh-8ucn
12
vulnerability VCID-gvc5-rtu7-eueb
13
vulnerability VCID-jp51-ftxv-4ud9
14
vulnerability VCID-kufg-z717-b7hm
15
vulnerability VCID-mdgs-etkz-abgd
16
vulnerability VCID-p8q4-rr16-6ycg
17
vulnerability VCID-pe9e-5tw4-rfbf
18
vulnerability VCID-pn4q-88ty-pbay
19
vulnerability VCID-qvs4-a8b6-2uht
20
vulnerability VCID-rg6h-uhep-kyce
21
vulnerability VCID-s53x-qyc6-bfcn
22
vulnerability VCID-t2ns-jx1q-2fek
23
vulnerability VCID-tyy7-1dkf-uufg
24
vulnerability VCID-v2tp-rt89-6ydw
25
vulnerability VCID-v9w8-12zc-9ycn
26
vulnerability VCID-vnt9-r111-33h3
27
vulnerability VCID-xvj8-jwkd-6ubd
28
vulnerability VCID-yb9d-mbgp-dfam
29
vulnerability VCID-zha3-5yra-sfae
30
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1%3Farch=el7sso
47
url pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1?arch=el8sso
purl pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1?arch=el8sso
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1b3e-49vk-27h2
1
vulnerability VCID-486s-u7j8-83e2
2
vulnerability VCID-4ue8-9kcp-uqah
3
vulnerability VCID-6bhd-zdh5-5qgz
4
vulnerability VCID-6m6w-vs31-byea
5
vulnerability VCID-8ra7-fpsb-5ye8
6
vulnerability VCID-9gek-hwbv-87hc
7
vulnerability VCID-c2nr-hks8-4qg1
8
vulnerability VCID-ejyg-88gf-sfbh
9
vulnerability VCID-f9a3-vz93-zqcq
10
vulnerability VCID-fh9y-kdy5-guau
11
vulnerability VCID-g5u6-4zxh-8ucn
12
vulnerability VCID-gvc5-rtu7-eueb
13
vulnerability VCID-jp51-ftxv-4ud9
14
vulnerability VCID-kufg-z717-b7hm
15
vulnerability VCID-mdgs-etkz-abgd
16
vulnerability VCID-p8q4-rr16-6ycg
17
vulnerability VCID-pe9e-5tw4-rfbf
18
vulnerability VCID-pn4q-88ty-pbay
19
vulnerability VCID-qvs4-a8b6-2uht
20
vulnerability VCID-rg6h-uhep-kyce
21
vulnerability VCID-s53x-qyc6-bfcn
22
vulnerability VCID-t2ns-jx1q-2fek
23
vulnerability VCID-tyy7-1dkf-uufg
24
vulnerability VCID-v2tp-rt89-6ydw
25
vulnerability VCID-v9w8-12zc-9ycn
26
vulnerability VCID-vnt9-r111-33h3
27
vulnerability VCID-xvj8-jwkd-6ubd
28
vulnerability VCID-yb9d-mbgp-dfam
29
vulnerability VCID-zha3-5yra-sfae
30
vulnerability VCID-zpc9-qmnr-ckga
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-sso7-keycloak@18.0.6-1.redhat_00001.1%3Farch=el8sso
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1471.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1471.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-1471
reference_id
reference_type
scores
0
value 0.93849
scoring_system epss
scoring_elements 0.99876
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-1471
2
reference_url https://bitbucket.org/snakeyaml/snakeyaml
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/snakeyaml/snakeyaml
3
reference_url https://bitbucket.org/snakeyaml/snakeyaml/commits/5014df1a36f50aca54405bb8433bc99a8847f758
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/snakeyaml/snakeyaml/commits/5014df1a36f50aca54405bb8433bc99a8847f758
4
reference_url https://bitbucket.org/snakeyaml/snakeyaml/commits/acc44099f5f4af26ff86b4e4e4cc1c874e2dc5c4
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/snakeyaml/snakeyaml/commits/acc44099f5f4af26ff86b4e4e4cc1c874e2dc5c4
5
reference_url https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64634374
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64634374
6
reference_url https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64876314
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64876314
7
reference_url https://bitbucket.org/snakeyaml/snakeyaml/wiki/CVE-2022-1471
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/snakeyaml/snakeyaml/wiki/CVE-2022-1471
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1471
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1471
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-1471
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-1471
11
reference_url https://security.netapp.com/advisory/ntap-20230818-0015
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20230818-0015
12
reference_url https://security.netapp.com/advisory/ntap-20240621-0006
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20240621-0006
13
reference_url https://snyk.io/blog/unsafe-deserialization-snakeyaml-java-cve-2022-1471
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/blog/unsafe-deserialization-snakeyaml-java-cve-2022-1471
14
reference_url http://www.openwall.com/lists/oss-security/2023/11/19/1
reference_id 1
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-07T18:13:22Z/
url http://www.openwall.com/lists/oss-security/2023/11/19/1
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2150009
reference_id 2150009
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2150009
16
reference_url https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html
reference_id cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-07T18:13:22Z/
url https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html
17
reference_url https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479
reference_id cve-2022-1471-vulnerability-in#comment-64581479
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-07T18:13:22Z/
url https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479
18
reference_url https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c
reference_id %EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-07T18:13:22Z/
url https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c
19
reference_url https://github.com/advisories/GHSA-mjmj-j48q-9wg2
reference_id GHSA-mjmj-j48q-9wg2
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mjmj-j48q-9wg2
20
reference_url https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2
reference_id GHSA-mjmj-j48q-9wg2
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-07T18:13:22Z/
url https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2
21
reference_url https://github.com/mbechler/marshalsec
reference_id marshalsec
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-07T18:13:22Z/
url https://github.com/mbechler/marshalsec
22
reference_url https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true
reference_id marshalsec.pdf?raw=true
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-07T18:13:22Z/
url https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true
23
reference_url https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc
reference_id mwrakFaEdnc
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-07T18:13:22Z/
url https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc
24
reference_url https://security.netapp.com/advisory/ntap-20230818-0015/
reference_id ntap-20230818-0015
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-07T18:13:22Z/
url https://security.netapp.com/advisory/ntap-20230818-0015/
25
reference_url https://security.netapp.com/advisory/ntap-20240621-0006/
reference_id ntap-20240621-0006
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-07T18:13:22Z/
url https://security.netapp.com/advisory/ntap-20240621-0006/
26
reference_url http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html
reference_id PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-07T18:13:22Z/
url http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html
27
reference_url https://access.redhat.com/errata/RHSA-2022:9032
reference_id RHSA-2022:9032
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:9032
28
reference_url https://access.redhat.com/errata/RHSA-2022:9058
reference_id RHSA-2022:9058
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:9058
29
reference_url https://access.redhat.com/errata/RHSA-2023:0697
reference_id RHSA-2023:0697
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0697
30
reference_url https://access.redhat.com/errata/RHSA-2023:0758
reference_id RHSA-2023:0758
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0758
31
reference_url https://access.redhat.com/errata/RHSA-2023:0777
reference_id RHSA-2023:0777
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0777
32
reference_url https://access.redhat.com/errata/RHSA-2023:1006
reference_id RHSA-2023:1006
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1006
33
reference_url https://access.redhat.com/errata/RHSA-2023:1043
reference_id RHSA-2023:1043
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1043
34
reference_url https://access.redhat.com/errata/RHSA-2023:1044
reference_id RHSA-2023:1044
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1044
35
reference_url https://access.redhat.com/errata/RHSA-2023:1045
reference_id RHSA-2023:1045
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1045
36
reference_url https://access.redhat.com/errata/RHSA-2023:1047
reference_id RHSA-2023:1047
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1047
37
reference_url https://access.redhat.com/errata/RHSA-2023:1049
reference_id RHSA-2023:1049
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1049
38
reference_url https://access.redhat.com/errata/RHSA-2023:1512
reference_id RHSA-2023:1512
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1512
39
reference_url https://access.redhat.com/errata/RHSA-2023:1513
reference_id RHSA-2023:1513
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1513
40
reference_url https://access.redhat.com/errata/RHSA-2023:1514
reference_id RHSA-2023:1514
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1514
41
reference_url https://access.redhat.com/errata/RHSA-2023:1516
reference_id RHSA-2023:1516
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1516
42
reference_url https://access.redhat.com/errata/RHSA-2023:2097
reference_id RHSA-2023:2097
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2097
43
reference_url https://access.redhat.com/errata/RHSA-2023:3198
reference_id RHSA-2023:3198
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3198
44
reference_url https://access.redhat.com/errata/RHSA-2023:4612
reference_id RHSA-2023:4612
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4612
45
reference_url https://access.redhat.com/errata/RHSA-2023:5165
reference_id RHSA-2023:5165
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5165
46
reference_url https://access.redhat.com/errata/RHSA-2023:6171
reference_id RHSA-2023:6171
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6171
47
reference_url https://access.redhat.com/errata/RHSA-2023:7697
reference_id RHSA-2023:7697
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7697
48
reference_url https://access.redhat.com/errata/RHSA-2024:0325
reference_id RHSA-2024:0325
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0325
49
reference_url https://access.redhat.com/errata/RHSA-2024:0775
reference_id RHSA-2024:0775
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0775
50
reference_url https://access.redhat.com/errata/RHSA-2024:1353
reference_id RHSA-2024:1353
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1353
51
reference_url https://access.redhat.com/errata/RHSA-2025:1746
reference_id RHSA-2025:1746
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1746
52
reference_url https://access.redhat.com/errata/RHSA-2025:1747
reference_id RHSA-2025:1747
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1747
Weaknesses
0
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
1
cwe_id 502
name Deserialization of Untrusted Data
description The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
0
date_added null
description 
The PyTorch model server contains multiple vulnerabilities that can be chained together to permit an
        unauthenticated remote attacker arbitrary Java code execution. The first vulnerability is that the management
        interface is bound to all IP addresses and not just the loop back interface as the documentation suggests. The
        second vulnerability (CVE-2023-43654) allows attackers with access to the management interface to register MAR
        model files from arbitrary servers. The third vulnerability is that when an MAR file is loaded, it can contain a
        YAML configuration file that when deserialized by snakeyaml, can lead to loading an arbitrary Java class.
required_action null
due_date null
notes 
Stability:
  - crash-safe
SideEffects:
  - ioc-in-logs
Reliability:
  - repeatable-session
known_ransomware_campaign_use false
source_date_published 2023-10-03
exploit_type null
platform Java
source_date_updated null
data_source Metasploit
source_url https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/multi/http/torchserver_cve_2023_43654.rb
Severity_range_score7.0 - 9.8
Exploitability2.0
Weighted_severity8.8
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-zpc9-qmnr-ckga