Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-x8et-cun9-6kgz
SummaryAn issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the serialized structures to induce memory corruption, leading to arbitrary code execution. This is caused by Incorrect Use of Privileged APIs.
Aliases
0
alias CVE-2026-34877
Fixed_packages
0
url pkg:deb/debian/mbedtls@0?distro=trixie
purl pkg:deb/debian/mbedtls@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mbedtls@0%3Fdistro=trixie
1
url pkg:deb/debian/mbedtls@2.16.9-0.1?distro=trixie
purl pkg:deb/debian/mbedtls@2.16.9-0.1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5bxk-rknm-zfhc
1
vulnerability VCID-f1fz-b8b6-dfb8
2
vulnerability VCID-gvkn-6e2m-dyez
3
vulnerability VCID-k8w1-nrjy-wfbe
4
vulnerability VCID-kchn-2wez-bbb2
5
vulnerability VCID-pj6w-rufw-nqgd
6
vulnerability VCID-vp4q-81cq-33cw
7
vulnerability VCID-vs6q-c4ug-xfer
8
vulnerability VCID-wsvw-6tmk-3kdj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mbedtls@2.16.9-0.1%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/mbedtls@2.28.3-1
purl pkg:deb/debian/mbedtls@2.28.3-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4sbv-dqyv-6baw
1
vulnerability VCID-5bxk-rknm-zfhc
2
vulnerability VCID-7ppw-f9jy-k7ae
3
vulnerability VCID-7v3a-5q44-cucz
4
vulnerability VCID-98cg-wuhp-qudq
5
vulnerability VCID-f1fz-b8b6-dfb8
6
vulnerability VCID-gvkn-6e2m-dyez
7
vulnerability VCID-jeen-6u3v-8qab
8
vulnerability VCID-kchn-2wez-bbb2
9
vulnerability VCID-ph4w-4hud-mkck
10
vulnerability VCID-pj6w-rufw-nqgd
11
vulnerability VCID-vp4q-81cq-33cw
12
vulnerability VCID-vs6q-c4ug-xfer
13
vulnerability VCID-wsvw-6tmk-3kdj
14
vulnerability VCID-x8et-cun9-6kgz
15
vulnerability VCID-zpq1-dwvf-8ka2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mbedtls@2.28.3-1
1
url pkg:deb/debian/mbedtls@2.28.3-1?distro=trixie
purl pkg:deb/debian/mbedtls@2.28.3-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4sbv-dqyv-6baw
1
vulnerability VCID-5bxk-rknm-zfhc
2
vulnerability VCID-7ppw-f9jy-k7ae
3
vulnerability VCID-7v3a-5q44-cucz
4
vulnerability VCID-98cg-wuhp-qudq
5
vulnerability VCID-f1fz-b8b6-dfb8
6
vulnerability VCID-gvkn-6e2m-dyez
7
vulnerability VCID-jeen-6u3v-8qab
8
vulnerability VCID-kchn-2wez-bbb2
9
vulnerability VCID-ph4w-4hud-mkck
10
vulnerability VCID-pj6w-rufw-nqgd
11
vulnerability VCID-vp4q-81cq-33cw
12
vulnerability VCID-vs6q-c4ug-xfer
13
vulnerability VCID-wsvw-6tmk-3kdj
14
vulnerability VCID-x8et-cun9-6kgz
15
vulnerability VCID-zpq1-dwvf-8ka2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mbedtls@2.28.3-1%3Fdistro=trixie
2
url pkg:deb/debian/mbedtls@3.6.5-0.1~deb13u1?distro=trixie
purl pkg:deb/debian/mbedtls@3.6.5-0.1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4sbv-dqyv-6baw
1
vulnerability VCID-jeen-6u3v-8qab
2
vulnerability VCID-ph4w-4hud-mkck
3
vulnerability VCID-x8et-cun9-6kgz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mbedtls@3.6.5-0.1~deb13u1%3Fdistro=trixie
3
url pkg:deb/debian/mbedtls@3.6.5-0.1~deb13u1
purl pkg:deb/debian/mbedtls@3.6.5-0.1~deb13u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4sbv-dqyv-6baw
1
vulnerability VCID-jeen-6u3v-8qab
2
vulnerability VCID-ph4w-4hud-mkck
3
vulnerability VCID-x8et-cun9-6kgz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mbedtls@3.6.5-0.1~deb13u1
4
url pkg:deb/debian/mbedtls@3.6.5-0.1?distro=trixie
purl pkg:deb/debian/mbedtls@3.6.5-0.1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4sbv-dqyv-6baw
1
vulnerability VCID-jeen-6u3v-8qab
2
vulnerability VCID-ph4w-4hud-mkck
3
vulnerability VCID-x8et-cun9-6kgz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mbedtls@3.6.5-0.1%3Fdistro=trixie
5
url pkg:deb/debian/mbedtls@3.6.5-0.1
purl pkg:deb/debian/mbedtls@3.6.5-0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4sbv-dqyv-6baw
1
vulnerability VCID-jeen-6u3v-8qab
2
vulnerability VCID-ph4w-4hud-mkck
3
vulnerability VCID-x8et-cun9-6kgz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mbedtls@3.6.5-0.1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34877
reference_id
reference_type
scores
0
value 0.00075
scoring_system epss
scoring_elements 0.22724
published_at 2026-04-04T12:55:00Z
1
value 0.00114
scoring_system epss
scoring_elements 0.29953
published_at 2026-04-07T12:55:00Z
2
value 0.0015
scoring_system epss
scoring_elements 0.35266
published_at 2026-04-24T12:55:00Z
3
value 0.0015
scoring_system epss
scoring_elements 0.35555
published_at 2026-04-18T12:55:00Z
4
value 0.0015
scoring_system epss
scoring_elements 0.35244
published_at 2026-04-26T12:55:00Z
5
value 0.0015
scoring_system epss
scoring_elements 0.35504
published_at 2026-04-21T12:55:00Z
6
value 0.0015
scoring_system epss
scoring_elements 0.35559
published_at 2026-04-08T12:55:00Z
7
value 0.0015
scoring_system epss
scoring_elements 0.35584
published_at 2026-04-09T12:55:00Z
8
value 0.0015
scoring_system epss
scoring_elements 0.35594
published_at 2026-04-11T12:55:00Z
9
value 0.0015
scoring_system epss
scoring_elements 0.35549
published_at 2026-04-12T12:55:00Z
10
value 0.0015
scoring_system epss
scoring_elements 0.35526
published_at 2026-04-13T12:55:00Z
11
value 0.0015
scoring_system epss
scoring_elements 0.35565
published_at 2026-04-16T12:55:00Z
12
value 0.00203
scoring_system epss
scoring_elements 0.42212
published_at 2026-04-29T12:55:00Z
13
value 0.00221
scoring_system epss
scoring_elements 0.44522
published_at 2026-05-12T12:55:00Z
14
value 0.00221
scoring_system epss
scoring_elements 0.44468
published_at 2026-05-05T12:55:00Z
15
value 0.00221
scoring_system epss
scoring_elements 0.44538
published_at 2026-05-07T12:55:00Z
16
value 0.00221
scoring_system epss
scoring_elements 0.44556
published_at 2026-05-09T12:55:00Z
17
value 0.00221
scoring_system epss
scoring_elements 0.44493
published_at 2026-05-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34877
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34877
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34877
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1132577
reference_id 1132577
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1132577
3
reference_url https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-serialized-data/
reference_id mbedtls-security-advisory-2026-03-serialized-data
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-02T17:51:48Z/
url https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-serialized-data/
4
reference_url https://mbed-tls.readthedocs.io/en/latest/security-advisories/
reference_id security-advisories
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-02T17:51:48Z/
url https://mbed-tls.readthedocs.io/en/latest/security-advisories/
Weaknesses
Exploits
Severity_range_score9.8 - 9.8
Exploitability0.5
Weighted_severity4.9
Risk_score2.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-x8et-cun9-6kgz