Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-atcy-z6qm-7qcn
Summary
Aliases
0
alias CVE-2021-36026
1
alias GHSA-8gfq-m4cf-w975
Fixed_packages
0
url pkg:composer/magento/community-edition@2.3.7-p1
purl pkg:composer/magento/community-edition@2.3.7-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pt49-zfad-2fgb
1
vulnerability VCID-snxt-bv9t-nbdu
2
vulnerability VCID-yjrz-v74j-xbfx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.3.7-p1
1
url pkg:composer/magento/community-edition@2.4.2-p2
purl pkg:composer/magento/community-edition@2.4.2-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pt49-zfad-2fgb
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.2-p2
Affected_packages
0
url pkg:composer/magento/community-edition@2.3.7
purl pkg:composer/magento/community-edition@2.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qch-21pj-4yhs
1
vulnerability VCID-3d19-jvhv-kfej
2
vulnerability VCID-3mbp-mm4g-yybx
3
vulnerability VCID-3mg5-5bnt-3qb3
4
vulnerability VCID-5m9k-7pab-bygj
5
vulnerability VCID-63pe-4w5f-zqax
6
vulnerability VCID-6cm3-pkzs-wbdu
7
vulnerability VCID-8vyv-da9b-x7c5
8
vulnerability VCID-atcy-z6qm-7qcn
9
vulnerability VCID-atnt-jfyb-uydk
10
vulnerability VCID-dahp-ngf2-yfck
11
vulnerability VCID-ddnf-1ejm-g3fm
12
vulnerability VCID-ea9q-x4cf-wfdj
13
vulnerability VCID-esvp-gu4v-hkc8
14
vulnerability VCID-fk7u-x6n8-y3a8
15
vulnerability VCID-ktbz-cqsm-cqdh
16
vulnerability VCID-nf7q-381b-eufk
17
vulnerability VCID-qdse-avkx-7kb6
18
vulnerability VCID-snxt-bv9t-nbdu
19
vulnerability VCID-u3cx-xm7q-8uch
20
vulnerability VCID-x63j-5hm1-8kh9
21
vulnerability VCID-yhrq-kbj5-puaz
22
vulnerability VCID-yjrz-v74j-xbfx
23
vulnerability VCID-z5ak-93ax-gues
24
vulnerability VCID-zpta-g6q9-ykdh
25
vulnerability VCID-zt1b-5ytz-wqb6
26
vulnerability VCID-zzn5-7yxb-t3hf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.3.7
1
url pkg:composer/magento/community-edition@2.4.2-p1
purl pkg:composer/magento/community-edition@2.4.2-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qch-21pj-4yhs
1
vulnerability VCID-3d19-jvhv-kfej
2
vulnerability VCID-3mbp-mm4g-yybx
3
vulnerability VCID-3mg5-5bnt-3qb3
4
vulnerability VCID-5m9k-7pab-bygj
5
vulnerability VCID-63pe-4w5f-zqax
6
vulnerability VCID-6cm3-pkzs-wbdu
7
vulnerability VCID-8vyv-da9b-x7c5
8
vulnerability VCID-atcy-z6qm-7qcn
9
vulnerability VCID-atnt-jfyb-uydk
10
vulnerability VCID-dahp-ngf2-yfck
11
vulnerability VCID-ddnf-1ejm-g3fm
12
vulnerability VCID-ea9q-x4cf-wfdj
13
vulnerability VCID-esvp-gu4v-hkc8
14
vulnerability VCID-fk7u-x6n8-y3a8
15
vulnerability VCID-ktbz-cqsm-cqdh
16
vulnerability VCID-nf7q-381b-eufk
17
vulnerability VCID-pt49-zfad-2fgb
18
vulnerability VCID-qdse-avkx-7kb6
19
vulnerability VCID-u3cx-xm7q-8uch
20
vulnerability VCID-x63j-5hm1-8kh9
21
vulnerability VCID-yhrq-kbj5-puaz
22
vulnerability VCID-z5ak-93ax-gues
23
vulnerability VCID-zpta-g6q9-ykdh
24
vulnerability VCID-zt1b-5ytz-wqb6
25
vulnerability VCID-zzn5-7yxb-t3hf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.2-p1
2
url pkg:composer/magento/community-edition@2.4.2
purl pkg:composer/magento/community-edition@2.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qch-21pj-4yhs
1
vulnerability VCID-3d19-jvhv-kfej
2
vulnerability VCID-3mbp-mm4g-yybx
3
vulnerability VCID-3mg5-5bnt-3qb3
4
vulnerability VCID-5m9k-7pab-bygj
5
vulnerability VCID-63pe-4w5f-zqax
6
vulnerability VCID-6cm3-pkzs-wbdu
7
vulnerability VCID-8vyv-da9b-x7c5
8
vulnerability VCID-atcy-z6qm-7qcn
9
vulnerability VCID-atnt-jfyb-uydk
10
vulnerability VCID-dahp-ngf2-yfck
11
vulnerability VCID-ddnf-1ejm-g3fm
12
vulnerability VCID-ea9q-x4cf-wfdj
13
vulnerability VCID-esvp-gu4v-hkc8
14
vulnerability VCID-fk7u-x6n8-y3a8
15
vulnerability VCID-hb1m-rxm7-nyga
16
vulnerability VCID-kf9w-4pch-5yhm
17
vulnerability VCID-ktbz-cqsm-cqdh
18
vulnerability VCID-nf7q-381b-eufk
19
vulnerability VCID-pt49-zfad-2fgb
20
vulnerability VCID-qdse-avkx-7kb6
21
vulnerability VCID-u3cx-xm7q-8uch
22
vulnerability VCID-x63j-5hm1-8kh9
23
vulnerability VCID-yhrq-kbj5-puaz
24
vulnerability VCID-z5ak-93ax-gues
25
vulnerability VCID-zpta-g6q9-ykdh
26
vulnerability VCID-zt1b-5ytz-wqb6
27
vulnerability VCID-zzn5-7yxb-t3hf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.2
3
url pkg:composer/magento/project-community-edition@2.0.2
purl pkg:composer/magento/project-community-edition@2.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16x4-fjuv-hbc4
1
vulnerability VCID-1qch-21pj-4yhs
2
vulnerability VCID-1wxk-rhfp-qqgp
3
vulnerability VCID-1xvu-3fjk-t7ay
4
vulnerability VCID-1yr5-8e84-cyf5
5
vulnerability VCID-2495-ugn7-v7fk
6
vulnerability VCID-2gjv-y49y-4yh7
7
vulnerability VCID-389t-bp5k-yqbw
8
vulnerability VCID-38rm-wf86-ryfw
9
vulnerability VCID-3d19-jvhv-kfej
10
vulnerability VCID-3d83-1r55-uqfb
11
vulnerability VCID-3hcd-r9gs-cfgh
12
vulnerability VCID-3jns-w9p4-jyca
13
vulnerability VCID-3mbp-mm4g-yybx
14
vulnerability VCID-3mg5-5bnt-3qb3
15
vulnerability VCID-3sn5-689e-cbhk
16
vulnerability VCID-3tpy-wktb-wqdj
17
vulnerability VCID-3vpy-uswf-5ugc
18
vulnerability VCID-3wnx-e9kp-fkg7
19
vulnerability VCID-46mz-swkk-suhn
20
vulnerability VCID-4kg3-wkw1-vqhy
21
vulnerability VCID-4phr-amm7-q3he
22
vulnerability VCID-4rga-e18t-myh6
23
vulnerability VCID-4w8w-6563-3kfb
24
vulnerability VCID-53d5-qzm4-vfgs
25
vulnerability VCID-5bn1-w5sa-ubft
26
vulnerability VCID-5fmh-e4j7-nbcf
27
vulnerability VCID-5m9k-7pab-bygj
28
vulnerability VCID-5wjs-5jc8-y7dv
29
vulnerability VCID-631j-28c3-zqam
30
vulnerability VCID-63pe-4w5f-zqax
31
vulnerability VCID-6cm3-pkzs-wbdu
32
vulnerability VCID-6gue-nxx5-u3h6
33
vulnerability VCID-7dbc-v42e-j7d6
34
vulnerability VCID-7jfc-dbkn-9fa4
35
vulnerability VCID-8crc-kmpq-63bd
36
vulnerability VCID-8vyv-da9b-x7c5
37
vulnerability VCID-8wm3-xqbd-zqf5
38
vulnerability VCID-94sc-9fyk-2uay
39
vulnerability VCID-9gte-ub5c-mqas
40
vulnerability VCID-9rdk-3631-eqcw
41
vulnerability VCID-9u6k-hbxd-8bds
42
vulnerability VCID-9v4c-gauv-wyh2
43
vulnerability VCID-a2mn-k8qn-j7c9
44
vulnerability VCID-a9hc-nhv2-7ubx
45
vulnerability VCID-ac6e-denb-w7hy
46
vulnerability VCID-annu-j9a3-xkhs
47
vulnerability VCID-atcy-z6qm-7qcn
48
vulnerability VCID-atnt-jfyb-uydk
49
vulnerability VCID-b6wy-nzzg-k3em
50
vulnerability VCID-bm3p-s43s-uuce
51
vulnerability VCID-c7rf-4ky3-tyev
52
vulnerability VCID-ca94-mqq1-jyaz
53
vulnerability VCID-ctr3-kt63-hybf
54
vulnerability VCID-d372-f5hu-1bhr
55
vulnerability VCID-dahp-ngf2-yfck
56
vulnerability VCID-ddnf-1ejm-g3fm
57
vulnerability VCID-de3q-b1v4-bybu
58
vulnerability VCID-dqfx-d99q-jyd1
59
vulnerability VCID-e514-8tra-9kg2
60
vulnerability VCID-ea9q-x4cf-wfdj
61
vulnerability VCID-eh85-akw2-4qby
62
vulnerability VCID-ekn2-uahd-4qgw
63
vulnerability VCID-enwr-t7r8-xyge
64
vulnerability VCID-epeq-fvse-xudw
65
vulnerability VCID-esvp-gu4v-hkc8
66
vulnerability VCID-eu82-bgnu-rue2
67
vulnerability VCID-euam-6b48-suhg
68
vulnerability VCID-ewjp-uxup-gqex
69
vulnerability VCID-f418-amxz-xfey
70
vulnerability VCID-f6vc-8z9a-cqej
71
vulnerability VCID-fk7u-x6n8-y3a8
72
vulnerability VCID-fs6u-kx4y-nqbh
73
vulnerability VCID-gdh1-vff1-cfc2
74
vulnerability VCID-gkb3-ddu2-qyg6
75
vulnerability VCID-gngq-4jm1-nffv
76
vulnerability VCID-gyd8-hu6s-wkgt
77
vulnerability VCID-hbre-ty72-g7gy
78
vulnerability VCID-hcbc-9c78-yye6
79
vulnerability VCID-hubk-cyxh-gbeu
80
vulnerability VCID-hwb9-yxzn-zub5
81
vulnerability VCID-jbzd-yjne-6ucr
82
vulnerability VCID-jede-wz7z-2ugt
83
vulnerability VCID-jew7-2yd7-8ffp
84
vulnerability VCID-jg5k-6vqh-57ey
85
vulnerability VCID-jgkp-2cew-c7hc
86
vulnerability VCID-jnsk-z1qy-8uh7
87
vulnerability VCID-khdx-kb5m-qyd7
88
vulnerability VCID-kj9m-ccf8-gyep
89
vulnerability VCID-ktbz-cqsm-cqdh
90
vulnerability VCID-mcuv-294k-5qc4
91
vulnerability VCID-mgk4-9tan-a7fj
92
vulnerability VCID-mgnu-rgqb-h7cw
93
vulnerability VCID-mn2q-e59e-9bhu
94
vulnerability VCID-mwg1-4tbg-53cg
95
vulnerability VCID-mxpb-g7qp-w3gp
96
vulnerability VCID-nf7q-381b-eufk
97
vulnerability VCID-ns3u-g7gm-kbfq
98
vulnerability VCID-ntcr-n7fp-j3ab
99
vulnerability VCID-p7gh-bgn5-kyfw
100
vulnerability VCID-p84d-d8gt-ukck
101
vulnerability VCID-pqpk-dh2p-4yc8
102
vulnerability VCID-pt49-zfad-2fgb
103
vulnerability VCID-qdse-avkx-7kb6
104
vulnerability VCID-qsq4-2nz1-p7hu
105
vulnerability VCID-qxz4-rh86-cfcu
106
vulnerability VCID-rgfy-hqz1-zyb4
107
vulnerability VCID-rhp2-bwp6-k3d4
108
vulnerability VCID-rmqf-8w57-uydk
109
vulnerability VCID-snxt-bv9t-nbdu
110
vulnerability VCID-t5m6-39fh-zfhg
111
vulnerability VCID-tk7j-4vsm-e7c6
112
vulnerability VCID-u3cx-xm7q-8uch
113
vulnerability VCID-u3gt-rhgh-p7ax
114
vulnerability VCID-u87h-sf89-k3ew
115
vulnerability VCID-u8ch-jew7-pubj
116
vulnerability VCID-ub5g-fuqv-xqej
117
vulnerability VCID-ueg1-1xj3-aqcq
118
vulnerability VCID-v7r7-xtq1-gug6
119
vulnerability VCID-vjad-xkj2-nygh
120
vulnerability VCID-vt4j-zfwn-m3cd
121
vulnerability VCID-vvzs-mjes-e3eq
122
vulnerability VCID-wbj6-ehhe-ybf1
123
vulnerability VCID-wdvt-5z3a-5bc2
124
vulnerability VCID-weqh-3ye3-nbbp
125
vulnerability VCID-whzv-vgev-rqd4
126
vulnerability VCID-wv9y-3kyz-hbgq
127
vulnerability VCID-x63j-5hm1-8kh9
128
vulnerability VCID-x9xn-qvau-kqhu
129
vulnerability VCID-xhej-jypg-7fah
130
vulnerability VCID-xum3-uvmz-efhj
131
vulnerability VCID-y9ew-ydqv-4kbf
132
vulnerability VCID-yh52-jggb-jfgx
133
vulnerability VCID-yhrq-kbj5-puaz
134
vulnerability VCID-yjgp-6ntk-xbc3
135
vulnerability VCID-yjrz-v74j-xbfx
136
vulnerability VCID-ypqs-5ju2-hkcz
137
vulnerability VCID-z5ak-93ax-gues
138
vulnerability VCID-zacs-wg6m-qyg4
139
vulnerability VCID-zgzb-haur-s7aq
140
vulnerability VCID-zndr-m4hp-gue2
141
vulnerability VCID-zpta-g6q9-ykdh
142
vulnerability VCID-zt1b-5ytz-wqb6
143
vulnerability VCID-zzn5-7yxb-t3hf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/project-community-edition@2.0.2
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-36026
reference_id
reference_type
scores
0
value 0.01528
scoring_system epss
scoring_elements 0.81601
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-36026
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb21-64.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://helpx.adobe.com/security/products/magento/apsb21-64.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-36026
reference_id CVE-2021-36026
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-36026
4
reference_url https://github.com/advisories/GHSA-8gfq-m4cf-w975
reference_id GHSA-8gfq-m4cf-w975
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8gfq-m4cf-w975
Weaknesses
0
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-atcy-z6qm-7qcn