Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-vu3d-n74c-5qgu
Summary
Aliases
0
alias CVE-2026-39395
1
alias GHSA-w6c6-c85g-mmv6
Fixed_packages
0
url pkg:apk/alpine/cosign@2.6.3-r0?arch=aarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/cosign@2.6.3-r0?arch=aarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@2.6.3-r0%3Farch=aarch64&distroversion=v3.23&reponame=community
1
url pkg:apk/alpine/cosign@2.6.3-r0?arch=armhf&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/cosign@2.6.3-r0?arch=armhf&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@2.6.3-r0%3Farch=armhf&distroversion=v3.23&reponame=community
2
url pkg:apk/alpine/cosign@2.6.3-r0?arch=armv7&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/cosign@2.6.3-r0?arch=armv7&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@2.6.3-r0%3Farch=armv7&distroversion=v3.23&reponame=community
3
url pkg:apk/alpine/cosign@2.6.3-r0?arch=loongarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/cosign@2.6.3-r0?arch=loongarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@2.6.3-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community
4
url pkg:apk/alpine/cosign@2.6.3-r0?arch=ppc64le&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/cosign@2.6.3-r0?arch=ppc64le&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@2.6.3-r0%3Farch=ppc64le&distroversion=v3.23&reponame=community
5
url pkg:apk/alpine/cosign@2.6.3-r0?arch=riscv64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/cosign@2.6.3-r0?arch=riscv64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@2.6.3-r0%3Farch=riscv64&distroversion=v3.23&reponame=community
6
url pkg:apk/alpine/cosign@2.6.3-r0?arch=s390x&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/cosign@2.6.3-r0?arch=s390x&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@2.6.3-r0%3Farch=s390x&distroversion=v3.23&reponame=community
7
url pkg:apk/alpine/cosign@2.6.3-r0?arch=x86&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/cosign@2.6.3-r0?arch=x86&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@2.6.3-r0%3Farch=x86&distroversion=v3.23&reponame=community
8
url pkg:apk/alpine/cosign@2.6.3-r0?arch=x86_64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/cosign@2.6.3-r0?arch=x86_64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@2.6.3-r0%3Farch=x86_64&distroversion=v3.23&reponame=community
9
url pkg:apk/alpine/cosign@3.0.6-r0?arch=aarch64&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=aarch64&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=aarch64&distroversion=v3.24&reponame=community
10
url pkg:apk/alpine/cosign@3.0.6-r0?arch=armhf&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=armhf&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=armhf&distroversion=v3.24&reponame=community
11
url pkg:apk/alpine/cosign@3.0.6-r0?arch=armv7&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=armv7&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=armv7&distroversion=v3.24&reponame=community
12
url pkg:apk/alpine/cosign@3.0.6-r0?arch=loongarch64&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=loongarch64&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=loongarch64&distroversion=v3.24&reponame=community
13
url pkg:apk/alpine/cosign@3.0.6-r0?arch=ppc64le&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=ppc64le&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=ppc64le&distroversion=v3.24&reponame=community
14
url pkg:apk/alpine/cosign@3.0.6-r0?arch=riscv64&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=riscv64&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=riscv64&distroversion=v3.24&reponame=community
15
url pkg:apk/alpine/cosign@3.0.6-r0?arch=s390x&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=s390x&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=s390x&distroversion=v3.24&reponame=community
16
url pkg:apk/alpine/cosign@3.0.6-r0?arch=x86&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=x86&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=x86&distroversion=v3.24&reponame=community
17
url pkg:apk/alpine/cosign@3.0.6-r0?arch=x86_64&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=x86_64&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=x86_64&distroversion=v3.24&reponame=community
18
url pkg:apk/alpine/cosign@3.0.6-r0?arch=aarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=aarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=aarch64&distroversion=edge&reponame=community
19
url pkg:apk/alpine/cosign@3.0.6-r0?arch=armhf&distroversion=edge&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=armhf&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=armhf&distroversion=edge&reponame=community
20
url pkg:apk/alpine/cosign@3.0.6-r0?arch=armv7&distroversion=edge&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=armv7&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=armv7&distroversion=edge&reponame=community
21
url pkg:apk/alpine/cosign@3.0.6-r0?arch=loongarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=loongarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=loongarch64&distroversion=edge&reponame=community
22
url pkg:apk/alpine/cosign@3.0.6-r0?arch=ppc64le&distroversion=edge&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=ppc64le&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=ppc64le&distroversion=edge&reponame=community
23
url pkg:apk/alpine/cosign@3.0.6-r0?arch=riscv64&distroversion=edge&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=riscv64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=riscv64&distroversion=edge&reponame=community
24
url pkg:apk/alpine/cosign@3.0.6-r0?arch=s390x&distroversion=edge&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=s390x&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=s390x&distroversion=edge&reponame=community
25
url pkg:apk/alpine/cosign@3.0.6-r0?arch=x86&distroversion=edge&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=x86&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=x86&distroversion=edge&reponame=community
26
url pkg:apk/alpine/cosign@3.0.6-r0?arch=x86_64&distroversion=edge&reponame=community
purl pkg:apk/alpine/cosign@3.0.6-r0?arch=x86_64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cosign@3.0.6-r0%3Farch=x86_64&distroversion=edge&reponame=community
27
url pkg:deb/debian/cosign@2.6.3-1
purl pkg:deb/debian/cosign@2.6.3-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cosign@2.6.3-1
28
url pkg:deb/debian/cosign@2.6.3-1?distro=trixie
purl pkg:deb/debian/cosign@2.6.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cosign@2.6.3-1%3Fdistro=trixie
29
url pkg:deb/debian/cosign@3.0.6-1?distro=trixie
purl pkg:deb/debian/cosign@3.0.6-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cosign@3.0.6-1%3Fdistro=trixie
30
url pkg:deb/debian/golang-github-sigstore-cosign-v2@2.6.3-2?distro=sid
purl pkg:deb/debian/golang-github-sigstore-cosign-v2@2.6.3-2?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-sigstore-cosign-v2@2.6.3-2%3Fdistro=sid
Affected_packages
0
url pkg:deb/debian/cosign@2.5.0-2
purl pkg:deb/debian/cosign@2.5.0-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9npm-txna-eba4
1
vulnerability VCID-q7fe-g1ra-jkg9
2
vulnerability VCID-vu3d-n74c-5qgu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cosign@2.5.0-2
1
url pkg:deb/debian/cosign@2.5.0-2?distro=trixie
purl pkg:deb/debian/cosign@2.5.0-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9npm-txna-eba4
1
vulnerability VCID-q7fe-g1ra-jkg9
2
vulnerability VCID-vu3d-n74c-5qgu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cosign@2.5.0-2%3Fdistro=trixie
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-39395.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-39395.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-39395
reference_id
reference_type
scores
0
value 0.00042
scoring_system epss
scoring_elements 0.13183
published_at 2026-06-12T12:55:00Z
1
value 0.00042
scoring_system epss
scoring_elements 0.13187
published_at 2026-06-13T12:55:00Z
2
value 0.00042
scoring_system epss
scoring_elements 0.13087
published_at 2026-06-11T12:55:00Z
3
value 0.00048
scoring_system epss
scoring_elements 0.15517
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-39395
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://github.com/sigstore/cosign
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/sigstore/cosign
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-39395
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-39395
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1133005
reference_id 1133005
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1133005
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2456254
reference_id 2456254
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2456254
7
reference_url https://github.com/sigstore/cosign/security/advisories/GHSA-w6c6-c85g-mmv6
reference_id GHSA-w6c6-c85g-mmv6
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-08T15:49:08Z/
url https://github.com/sigstore/cosign/security/advisories/GHSA-w6c6-c85g-mmv6
Weaknesses
0
cwe_id 754
name Improper Check for Unusual or Exceptional Conditions
description The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.
1
cwe_id 347
name Improper Verification of Cryptographic Signature
description The product does not verify, or incorrectly verifies, the cryptographic signature for data.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-vu3d-n74c-5qgu