Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-fn89-2z7s-bbf3
Summary
Aliases
0
alias CVE-2026-46633
1
alias GHSA-7p85-w9px-jpjp
Fixed_packages
0
url pkg:composer/twig/twig@3.26.0
purl pkg:composer/twig/twig@3.26.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.26.0
1
url pkg:deb/debian/php-twig@3.5.1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/php-twig@3.5.1-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2xh3-h389-euft
1
vulnerability VCID-6gnm-463a-ryd1
2
vulnerability VCID-ej3q-wh2d-c7dp
3
vulnerability VCID-k8rw-ypuu-gkcw
4
vulnerability VCID-qxwp-jbbe-jugm
5
vulnerability VCID-xbrc-yrwh-dqaq
6
vulnerability VCID-yj87-u4zq-xkhn
7
vulnerability VCID-z6z6-8t1r-bqg3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@3.5.1-1%252Bdeb12u1%3Fdistro=trixie
2
url pkg:deb/debian/php-twig@3.5.1-1%2Bdeb12u1
purl pkg:deb/debian/php-twig@3.5.1-1%2Bdeb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2xh3-h389-euft
1
vulnerability VCID-6gnm-463a-ryd1
2
vulnerability VCID-ej3q-wh2d-c7dp
3
vulnerability VCID-k8rw-ypuu-gkcw
4
vulnerability VCID-qxwp-jbbe-jugm
5
vulnerability VCID-xbrc-yrwh-dqaq
6
vulnerability VCID-yj87-u4zq-xkhn
7
vulnerability VCID-z6z6-8t1r-bqg3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@3.5.1-1%252Bdeb12u1
3
url pkg:deb/debian/php-twig@3.5.1-1%2Bdeb12u3?distro=trixie
purl pkg:deb/debian/php-twig@3.5.1-1%2Bdeb12u3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@3.5.1-1%252Bdeb12u3%3Fdistro=trixie
4
url pkg:deb/debian/php-twig@3.20.0-2?distro=trixie
purl pkg:deb/debian/php-twig@3.20.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@3.20.0-2%3Fdistro=trixie
5
url pkg:deb/debian/php-twig@3.26.0-1?distro=trixie
purl pkg:deb/debian/php-twig@3.26.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@3.26.0-1%3Fdistro=trixie
6
url pkg:deb/debian/php-twig@3.27.0-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/php-twig@3.27.0-0%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@3.27.0-0%252Bdeb13u1%3Fdistro=trixie
7
url pkg:deb/debian/php-twig@3.27.1-1?distro=trixie
purl pkg:deb/debian/php-twig@3.27.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@3.27.1-1%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/php-twig@2.14.3-1%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/php-twig@2.14.3-1%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1gz2-ypah-a3h5
1
vulnerability VCID-2xh3-h389-euft
2
vulnerability VCID-6gnm-463a-ryd1
3
vulnerability VCID-ej3q-wh2d-c7dp
4
vulnerability VCID-fn89-2z7s-bbf3
5
vulnerability VCID-k2h4-zuu9-pbfe
6
vulnerability VCID-k8rw-ypuu-gkcw
7
vulnerability VCID-qxwp-jbbe-jugm
8
vulnerability VCID-xbrc-yrwh-dqaq
9
vulnerability VCID-y3m4-y1rf-bbbn
10
vulnerability VCID-yj87-u4zq-xkhn
11
vulnerability VCID-z6z6-8t1r-bqg3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@2.14.3-1%252Bdeb11u2%3Fdistro=trixie
1
url pkg:deb/debian/php-twig@2.14.3-1%2Bdeb11u2
purl pkg:deb/debian/php-twig@2.14.3-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1gz2-ypah-a3h5
1
vulnerability VCID-2xh3-h389-euft
2
vulnerability VCID-6gnm-463a-ryd1
3
vulnerability VCID-9nta-9jrh-sbaz
4
vulnerability VCID-ej3q-wh2d-c7dp
5
vulnerability VCID-fn89-2z7s-bbf3
6
vulnerability VCID-k2h4-zuu9-pbfe
7
vulnerability VCID-k8rw-ypuu-gkcw
8
vulnerability VCID-kyz6-acv6-ykhm
9
vulnerability VCID-qxwp-jbbe-jugm
10
vulnerability VCID-xbrc-yrwh-dqaq
11
vulnerability VCID-y3m4-y1rf-bbbn
12
vulnerability VCID-yj87-u4zq-xkhn
13
vulnerability VCID-z6z6-8t1r-bqg3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@2.14.3-1%252Bdeb11u2
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-46633
reference_id
reference_type
scores
0
value 0.00357
scoring_system epss
scoring_elements 0.585
published_at 2026-06-12T12:55:00Z
1
value 0.00357
scoring_system epss
scoring_elements 0.58505
published_at 2026-06-14T12:55:00Z
2
value 0.00357
scoring_system epss
scoring_elements 0.58516
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-46633
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46633
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46633
2
reference_url https://github.com/twigphp/Twig
reference_id
reference_type
scores
0
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/twigphp/Twig
3
reference_url https://symfony.com/cve-2026-46633
reference_id CVE-2026-46633
reference_type
scores
0
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://symfony.com/cve-2026-46633
4
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2026-46633.yaml
reference_id CVE-2026-46633.YAML
reference_type
scores
0
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2026-46633.yaml
5
reference_url https://github.com/advisories/GHSA-7p85-w9px-jpjp
reference_id GHSA-7p85-w9px-jpjp
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7p85-w9px-jpjp
6
reference_url https://github.com/twigphp/Twig/security/advisories/GHSA-7p85-w9px-jpjp
reference_id GHSA-7p85-w9px-jpjp
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/twigphp/Twig/security/advisories/GHSA-7p85-w9px-jpjp
Weaknesses
0
cwe_id 94
name Improper Control of Generation of Code ('Code Injection')
description The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Exploits
Severity_range_score9.0 - 10.0
Exploitability0.5
Weighted_severity9.0
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-fn89-2z7s-bbf3