Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-j47z-23xq-sqbm

Summary

Improper Link Resolution Before File Access
Jekyll allows attackers to access arbitrary files by specifying a symlink in the `include` key in the `_config.yml` file.

Aliases

alias	CVE-2018-17567

alias	GHSA-4xjh-m3qx-49wc

Fixed_packages

url	pkg:deb/debian/jekyll@3.8.3%2Bdfsg-3.1?distro=trixie
purl	pkg:deb/debian/jekyll@3.8.3%2Bdfsg-3.1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/jekyll@3.8.3%252Bdfsg-3.1%3Fdistro=trixie

url	pkg:deb/debian/jekyll@3.9.0%2Bdfsg-3?distro=trixie
purl	pkg:deb/debian/jekyll@3.9.0%2Bdfsg-3?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/jekyll@3.9.0%252Bdfsg-3%3Fdistro=trixie

url	pkg:deb/debian/jekyll@4.3.1%2Bdfsg-3%2Bdeb12u1?distro=trixie
purl	pkg:deb/debian/jekyll@4.3.1%2Bdfsg-3%2Bdeb12u1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/jekyll@4.3.1%252Bdfsg-3%252Bdeb12u1%3Fdistro=trixie

url	pkg:deb/debian/jekyll@4.3.4%2Bdfsg-1?distro=trixie
purl	pkg:deb/debian/jekyll@4.3.4%2Bdfsg-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/jekyll@4.3.4%252Bdfsg-1%3Fdistro=trixie

url	pkg:deb/debian/jekyll@4.4.1%2Bdfsg-3?distro=trixie
purl	pkg:deb/debian/jekyll@4.4.1%2Bdfsg-3?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/jekyll@4.4.1%252Bdfsg-3%3Fdistro=trixie

url	pkg:gem/jekyll@3.6.3
purl	pkg:gem/jekyll@3.6.3
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.6.3

url	pkg:gem/jekyll@3.7.4
purl	pkg:gem/jekyll@3.7.4
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.7.4

url	pkg:gem/jekyll@3.8.4
purl	pkg:gem/jekyll@3.8.4
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.8.4

Affected_packages

url pkg:gem/jekyll@0.1.2

purl pkg:gem/jekyll@0.1.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.1.2

url pkg:gem/jekyll@0.1.3

purl pkg:gem/jekyll@0.1.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.1.3

url pkg:gem/jekyll@0.1.4

purl pkg:gem/jekyll@0.1.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.1.4

url pkg:gem/jekyll@0.1.5

purl pkg:gem/jekyll@0.1.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.1.5

url pkg:gem/jekyll@0.1.6

purl pkg:gem/jekyll@0.1.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.1.6

url pkg:gem/jekyll@0.2.0

purl pkg:gem/jekyll@0.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.2.0

url pkg:gem/jekyll@0.2.1

purl pkg:gem/jekyll@0.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.2.1

url pkg:gem/jekyll@0.3.0

purl pkg:gem/jekyll@0.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.3.0

url pkg:gem/jekyll@0.4.1

purl pkg:gem/jekyll@0.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.4.1

url pkg:gem/jekyll@0.5.1

purl pkg:gem/jekyll@0.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.5.1

url pkg:gem/jekyll@0.5.3

purl pkg:gem/jekyll@0.5.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.5.3

url pkg:gem/jekyll@0.5.4

purl pkg:gem/jekyll@0.5.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.5.4

url pkg:gem/jekyll@0.5.5

purl pkg:gem/jekyll@0.5.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.5.5

url pkg:gem/jekyll@0.5.6

purl pkg:gem/jekyll@0.5.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.5.6

url pkg:gem/jekyll@0.5.7

purl pkg:gem/jekyll@0.5.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.5.7

url pkg:gem/jekyll@0.6.0

purl pkg:gem/jekyll@0.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.6.0

url pkg:gem/jekyll@0.6.1

purl pkg:gem/jekyll@0.6.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.6.1

url pkg:gem/jekyll@0.6.2

purl pkg:gem/jekyll@0.6.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.6.2

url pkg:gem/jekyll@0.7.0

purl pkg:gem/jekyll@0.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.7.0

url pkg:gem/jekyll@0.8.0

purl pkg:gem/jekyll@0.8.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.8.0

url pkg:gem/jekyll@0.9.0

purl pkg:gem/jekyll@0.9.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.9.0

url pkg:gem/jekyll@0.10.0

purl pkg:gem/jekyll@0.10.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.10.0

url pkg:gem/jekyll@0.11.0

purl pkg:gem/jekyll@0.11.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.11.0

url pkg:gem/jekyll@0.11.2

purl pkg:gem/jekyll@0.11.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.11.2

url pkg:gem/jekyll@0.12.0

purl pkg:gem/jekyll@0.12.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.12.0

url pkg:gem/jekyll@0.12.1

purl pkg:gem/jekyll@0.12.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@0.12.1

url pkg:gem/jekyll@1.0.0.beta1

purl pkg:gem/jekyll@1.0.0.beta1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.0.0.beta1

url pkg:gem/jekyll@1.0.0.beta2

purl pkg:gem/jekyll@1.0.0.beta2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.0.0.beta2

url pkg:gem/jekyll@1.0.0.beta3

purl pkg:gem/jekyll@1.0.0.beta3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.0.0.beta3

url pkg:gem/jekyll@1.0.0.beta4

purl pkg:gem/jekyll@1.0.0.beta4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.0.0.beta4

url pkg:gem/jekyll@1.0.0.rc1

purl pkg:gem/jekyll@1.0.0.rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.0.0.rc1

url pkg:gem/jekyll@1.0.0

purl pkg:gem/jekyll@1.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.0.0

url pkg:gem/jekyll@1.0.1

purl pkg:gem/jekyll@1.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.0.1

url pkg:gem/jekyll@1.0.2

purl pkg:gem/jekyll@1.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.0.2

url pkg:gem/jekyll@1.0.3

purl pkg:gem/jekyll@1.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.0.3

url pkg:gem/jekyll@1.0.4

purl pkg:gem/jekyll@1.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.0.4

url pkg:gem/jekyll@1.1.1

purl pkg:gem/jekyll@1.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.1.1

url pkg:gem/jekyll@1.1.2

purl pkg:gem/jekyll@1.1.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.1.2

url pkg:gem/jekyll@1.2.0

purl pkg:gem/jekyll@1.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.2.0

url pkg:gem/jekyll@1.2.1

purl pkg:gem/jekyll@1.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.2.1

url pkg:gem/jekyll@1.3.0.rc

purl pkg:gem/jekyll@1.3.0.rc

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.3.0.rc

url pkg:gem/jekyll@1.3.0

purl pkg:gem/jekyll@1.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.3.0

url pkg:gem/jekyll@1.3.1

purl pkg:gem/jekyll@1.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.3.1

url pkg:gem/jekyll@1.4.0

purl pkg:gem/jekyll@1.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.4.0

url pkg:gem/jekyll@1.4.1

purl pkg:gem/jekyll@1.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.4.1

url pkg:gem/jekyll@1.4.2

purl pkg:gem/jekyll@1.4.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.4.2

url pkg:gem/jekyll@1.4.3

purl pkg:gem/jekyll@1.4.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.4.3

url pkg:gem/jekyll@1.5.0

purl pkg:gem/jekyll@1.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.5.0

url pkg:gem/jekyll@1.5.1

purl pkg:gem/jekyll@1.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@1.5.1

url pkg:gem/jekyll@2.0.0.alpha.1

purl pkg:gem/jekyll@2.0.0.alpha.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.0.0.alpha.1

url pkg:gem/jekyll@2.0.0.alpha.2

purl pkg:gem/jekyll@2.0.0.alpha.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.0.0.alpha.2

url pkg:gem/jekyll@2.0.0.alpha.3

purl pkg:gem/jekyll@2.0.0.alpha.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.0.0.alpha.3

url pkg:gem/jekyll@2.0.0.rc1

purl pkg:gem/jekyll@2.0.0.rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.0.0.rc1

url pkg:gem/jekyll@2.0.0

purl pkg:gem/jekyll@2.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.0.0

url pkg:gem/jekyll@2.0.1

purl pkg:gem/jekyll@2.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.0.1

url pkg:gem/jekyll@2.0.2

purl pkg:gem/jekyll@2.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.0.2

url pkg:gem/jekyll@2.0.3

purl pkg:gem/jekyll@2.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.0.3

url pkg:gem/jekyll@2.1.0

purl pkg:gem/jekyll@2.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.1.0

url pkg:gem/jekyll@2.1.1

purl pkg:gem/jekyll@2.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.1.1

url pkg:gem/jekyll@2.2.0

purl pkg:gem/jekyll@2.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.2.0

url pkg:gem/jekyll@2.3.0

purl pkg:gem/jekyll@2.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.3.0

url pkg:gem/jekyll@2.4.0

purl pkg:gem/jekyll@2.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.4.0

url pkg:gem/jekyll@2.5.0

purl pkg:gem/jekyll@2.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.5.0

url pkg:gem/jekyll@2.5.1

purl pkg:gem/jekyll@2.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.5.1

url pkg:gem/jekyll@2.5.2

purl pkg:gem/jekyll@2.5.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.5.2

url pkg:gem/jekyll@2.5.3

purl pkg:gem/jekyll@2.5.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@2.5.3

url pkg:gem/jekyll@3.0.0.pre.beta1

purl pkg:gem/jekyll@3.0.0.pre.beta1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.0.pre.beta1

url pkg:gem/jekyll@3.0.0.pre.beta2

purl pkg:gem/jekyll@3.0.0.pre.beta2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.0.pre.beta2

url pkg:gem/jekyll@3.0.0.pre.beta3

purl pkg:gem/jekyll@3.0.0.pre.beta3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.0.pre.beta3

url pkg:gem/jekyll@3.0.0.pre.beta4

purl pkg:gem/jekyll@3.0.0.pre.beta4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.0.pre.beta4

url pkg:gem/jekyll@3.0.0.pre.beta5

purl pkg:gem/jekyll@3.0.0.pre.beta5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.0.pre.beta5

url pkg:gem/jekyll@3.0.0.pre.beta6

purl pkg:gem/jekyll@3.0.0.pre.beta6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.0.pre.beta6

url pkg:gem/jekyll@3.0.0.pre.beta7

purl pkg:gem/jekyll@3.0.0.pre.beta7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.0.pre.beta7

url pkg:gem/jekyll@3.0.0.pre.beta8

purl pkg:gem/jekyll@3.0.0.pre.beta8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.0.pre.beta8

url pkg:gem/jekyll@3.0.0.pre.beta9

purl pkg:gem/jekyll@3.0.0.pre.beta9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.0.pre.beta9

url pkg:gem/jekyll@3.0.0.pre.beta10

purl pkg:gem/jekyll@3.0.0.pre.beta10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.0.pre.beta10

url pkg:gem/jekyll@3.0.0.pre.rc1

purl pkg:gem/jekyll@3.0.0.pre.rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.0.pre.rc1

url pkg:gem/jekyll@3.0.0

purl pkg:gem/jekyll@3.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.0

url pkg:gem/jekyll@3.0.1

purl pkg:gem/jekyll@3.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.1

url pkg:gem/jekyll@3.0.2

purl pkg:gem/jekyll@3.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.2

url pkg:gem/jekyll@3.0.3

purl pkg:gem/jekyll@3.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.3

url pkg:gem/jekyll@3.0.4

purl pkg:gem/jekyll@3.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.4

url pkg:gem/jekyll@3.0.5

purl pkg:gem/jekyll@3.0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.0.5

url pkg:gem/jekyll@3.1.0.pre.beta1

purl pkg:gem/jekyll@3.1.0.pre.beta1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.1.0.pre.beta1

url pkg:gem/jekyll@3.1.0.pre.rc1

purl pkg:gem/jekyll@3.1.0.pre.rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.1.0.pre.rc1

url pkg:gem/jekyll@3.1.0.pre.rc2

purl pkg:gem/jekyll@3.1.0.pre.rc2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.1.0.pre.rc2

url pkg:gem/jekyll@3.1.0.pre.rc3

purl pkg:gem/jekyll@3.1.0.pre.rc3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.1.0.pre.rc3

url pkg:gem/jekyll@3.1.0

purl pkg:gem/jekyll@3.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.1.0

url pkg:gem/jekyll@3.1.1

purl pkg:gem/jekyll@3.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.1.1

url pkg:gem/jekyll@3.1.2

purl pkg:gem/jekyll@3.1.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.1.2

url pkg:gem/jekyll@3.1.3

purl pkg:gem/jekyll@3.1.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.1.3

url pkg:gem/jekyll@3.1.4

purl pkg:gem/jekyll@3.1.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.1.4

url pkg:gem/jekyll@3.1.5

purl pkg:gem/jekyll@3.1.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.1.5

url pkg:gem/jekyll@3.1.6

purl pkg:gem/jekyll@3.1.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.1.6

url pkg:gem/jekyll@3.2.0.pre.beta1

purl pkg:gem/jekyll@3.2.0.pre.beta1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.2.0.pre.beta1

url pkg:gem/jekyll@3.2.0.pre.beta2

purl pkg:gem/jekyll@3.2.0.pre.beta2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.2.0.pre.beta2

url pkg:gem/jekyll@3.2.0

purl pkg:gem/jekyll@3.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.2.0

url pkg:gem/jekyll@3.2.1

purl pkg:gem/jekyll@3.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.2.1

url pkg:gem/jekyll@3.3.0.pre.rc1

purl pkg:gem/jekyll@3.3.0.pre.rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.3.0.pre.rc1

url pkg:gem/jekyll@3.3.0

purl pkg:gem/jekyll@3.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.3.0

100

url pkg:gem/jekyll@3.3.1

purl pkg:gem/jekyll@3.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.3.1

101

url pkg:gem/jekyll@3.4.0

purl pkg:gem/jekyll@3.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.4.0

102

url pkg:gem/jekyll@3.4.1

purl pkg:gem/jekyll@3.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.4.1

103

url pkg:gem/jekyll@3.4.2

purl pkg:gem/jekyll@3.4.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.4.2

104

url pkg:gem/jekyll@3.4.3

purl pkg:gem/jekyll@3.4.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.4.3

105

url pkg:gem/jekyll@3.4.4

purl pkg:gem/jekyll@3.4.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.4.4

106

url pkg:gem/jekyll@3.4.5

purl pkg:gem/jekyll@3.4.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.4.5

107

url pkg:gem/jekyll@3.5.0

purl pkg:gem/jekyll@3.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.5.0

108

url pkg:gem/jekyll@3.5.1

purl pkg:gem/jekyll@3.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.5.1

109

url pkg:gem/jekyll@3.5.2

purl pkg:gem/jekyll@3.5.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.5.2

110

url pkg:gem/jekyll@3.6.0.pre.beta1

purl pkg:gem/jekyll@3.6.0.pre.beta1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.6.0.pre.beta1

111

url pkg:gem/jekyll@3.6.0

purl pkg:gem/jekyll@3.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.6.0

112

url pkg:gem/jekyll@3.6.1

purl pkg:gem/jekyll@3.6.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.6.1

113

url pkg:gem/jekyll@3.6.2

purl pkg:gem/jekyll@3.6.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.6.2

114

url pkg:gem/jekyll@3.7

purl pkg:gem/jekyll@3.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.7

115

url pkg:gem/jekyll@3.7.0

purl pkg:gem/jekyll@3.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.7.0

116

url pkg:gem/jekyll@3.7.2

purl pkg:gem/jekyll@3.7.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.7.2

117

url pkg:gem/jekyll@3.7.3

purl pkg:gem/jekyll@3.7.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.7.3

118

url pkg:gem/jekyll@3.8

purl pkg:gem/jekyll@3.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.8

119

url pkg:gem/jekyll@3.8.0

purl pkg:gem/jekyll@3.8.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.8.0

120

url pkg:gem/jekyll@3.8.1

purl pkg:gem/jekyll@3.8.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.8.1

121

url pkg:gem/jekyll@3.8.2

purl pkg:gem/jekyll@3.8.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.8.2

122

url pkg:gem/jekyll@3.8.3

purl pkg:gem/jekyll@3.8.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-j47z-23xq-sqbm

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/jekyll@3.8.3

References

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2018-17567

reference_id

reference_type

scores

value	0.0043
scoring_system	epss
scoring_elements	0.62832
published_at	2026-05-30T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2018-17567

reference_url

https://github.com/jekyll/jekyll

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/jekyll/jekyll

reference_url

https://github.com/jekyll/jekyll/pull/7224

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/jekyll/jekyll/pull/7224

reference_url

https://jekyllrb.com/news/2018/09/19/security-fixes-for-3-6-3-7-3-8

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://jekyllrb.com/news/2018/09/19/security-fixes-for-3-6-3-7-3-8

reference_url

https://jekyllrb.com/news/2018/09/19/security-fixes-for-3-6-3-7-3-8/

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3
scoring_elements

url

https://jekyllrb.com/news/2018/09/19/security-fixes-for-3-6-3-7-3-8/

reference_url

https://lists.apache.org/thread.html/71da391f584b2fb301d2df0e491b279d87287e2fb4b11309f04ad984@%3Ccommits.accumulo.apache.org%3E

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.apache.org/thread.html/71da391f584b2fb301d2df0e491b279d87287e2fb4b11309f04ad984@%3Ccommits.accumulo.apache.org%3E

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909933
reference_id	909933
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909933

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2018-17567

reference_id

CVE-2018-17567

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2018-17567

reference_url

https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jekyll/CVE-2018-17567.yml

reference_id

CVE-2018-17567.YML

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jekyll/CVE-2018-17567.yml

reference_url

https://github.com/advisories/GHSA-4xjh-m3qx-49wc

reference_id

GHSA-4xjh-m3qx-49wc

reference_type

scores

value	HIGH
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-4xjh-m3qx-49wc

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	59
name	Improper Link Resolution Before File Access ('Link Following')
description	The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score 7.0 - 8.9

Exploitability 0.5

Weighted_severity 8.0

Risk_score 4.0

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j47z-23xq-sqbm

Vulnerability Instance