Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-v6d1-usp8-ebhe
Summarydynoxide: DNS rebinding and cross-origin CSRF via MCP HTTP transport
Aliases
0
alias GHSA-fvh2-gm75-j4j7
Fixed_packages
0
url pkg:cargo/dynoxide-rs@0.9.13
purl pkg:cargo/dynoxide-rs@0.9.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:cargo/dynoxide-rs@0.9.13
1
url pkg:npm/dynoxide@0.9.13
purl pkg:npm/dynoxide@0.9.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dynoxide@0.9.13
Affected_packages
0
url pkg:cargo/dynoxide-rs@0.9.3
purl pkg:cargo/dynoxide-rs@0.9.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-v6d1-usp8-ebhe
resource_url http://public2.vulnerablecode.io/packages/pkg:cargo/dynoxide-rs@0.9.3
1
url pkg:npm/dynoxide@0.9.3
purl pkg:npm/dynoxide@0.9.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-v6d1-usp8-ebhe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/dynoxide@0.9.3
References
0
reference_url https://github.com/nubo-db/dynoxide
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/nubo-db/dynoxide
1
reference_url https://github.com/nubo-db/dynoxide/releases/tag/v0.9.13
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/nubo-db/dynoxide/releases/tag/v0.9.13
2
reference_url https://rustsec.org/advisories/RUSTSEC-2026-0140.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://rustsec.org/advisories/RUSTSEC-2026-0140.html
3
reference_url https://github.com/advisories/GHSA-fvh2-gm75-j4j7
reference_id GHSA-fvh2-gm75-j4j7
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-fvh2-gm75-j4j7
4
reference_url https://github.com/nubo-db/dynoxide/security/advisories/GHSA-fvh2-gm75-j4j7
reference_id GHSA-fvh2-gm75-j4j7
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/nubo-db/dynoxide/security/advisories/GHSA-fvh2-gm75-j4j7
Weaknesses
0
cwe_id 346
name Origin Validation Error
description The product does not properly verify that the source of data or communication is valid.
1
cwe_id 350
name Reliance on Reverse DNS Resolution for a Security-Critical Action
description The product performs reverse DNS resolution on an IP address to obtain the hostname and make a security decision, but it does not properly ensure that the IP address is truly associated with the hostname.
2
cwe_id 352
name Cross-Site Request Forgery (CSRF)
description The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-v6d1-usp8-ebhe