{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36554?format=json","vulnerability_id":"VCID-1q3x-5eug-afdg","summary":"Vyper is a Pythonic Smart Contract Language for the EVM. The `_abi_decode()` function does not validate input when it is nested in an expression. Uses of `_abi_decode()` can be constructed which allow for bounds checking to be bypassed resulting in incorrect results. This issue has not yet been fixed, but a fix is expected in release `0.3.10`. Users are advised to reference pull request #3626.","aliases":[{"alias":"CVE-2023-42460"},{"alias":"GHSA-cx2q-hfxr-rj97"},{"alias":"PYSEC-2023-191"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/35879?format=json","purl":"pkg:pypi/vyper@0.3.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1r9c-w5zc-6ker"},{"vulnerability":"VCID-br4v-y1ka-wbh2"},{"vulnerability":"VCID-c8rf-ec8a-gybs"},{"vulnerability":"VCID-cp7n-z6w9-k3bn"},{"vulnerability":"VCID-djvb-mdjy-b7g5"},{"vulnerability":"VCID-m355-31jd-1kfq"},{"vulnerability":"VCID-pcsz-xwb8-7yh4"},{"vulnerability":"VCID-qfyr-upmm-duea"},{"vulnerability":"VCID-shx9-8v43-9qem"},{"vulnerability":"VCID-vchm-6wyg-83hk"},{"vulnerability":"VCID-vz6u-kbjy-hkfc"},{"vulnerability":"VCID-wc7x-rsqa-bkcm"},{"vulnerability":"VCID-wmen-dnf4-2kef"},{"vulnerability":"VCID-x4dz-scmh-b7dj"},{"vulnerability":"VCID-x6fh-e77r-pycx"},{"vulnerability":"VCID-zkhz-ckgg-hkat"},{"vulnerability":"VCID-zsnu-88np-fyet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/vyper@0.3.10"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/27894?format=json","purl":"pkg:pypi/vyper@0.3.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1q3x-5eug-afdg"},{"vulnerability":"VCID-1r9c-w5zc-6ker"},{"vulnerability":"VCID-27ed-mhnf-ykgz"},{"vulnerability":"VCID-297e-aexx-ykea"},{"vulnerability":"VCID-3f9m-vgt7-m7gg"},{"vulnerability":"VCID-5zbv-sgt1-y3be"},{"vulnerability":"VCID-7nbf-6rd9-2uap"},{"vulnerability":"VCID-a8ph-1jta-uka1"},{"vulnerability":"VCID-br4v-y1ka-wbh2"},{"vulnerability":"VCID-c8rf-ec8a-gybs"},{"vulnerability":"VCID-cp7n-z6w9-k3bn"},{"vulnerability":"VCID-cpb5-3f58-5ueb"},{"vulnerability":"VCID-djvb-mdjy-b7g5"},{"vulnerability":"VCID-edbb-gb6x-7kby"},{"vulnerability":"VCID-h6ck-r6j1-yuhp"},{"vulnerability":"VCID-m355-31jd-1kfq"},{"vulnerability":"VCID-mw5j-2jm9-j3dv"},{"vulnerability":"VCID-pvjj-s95r-u3f7"},{"vulnerability":"VCID-qfyr-upmm-duea"},{"vulnerability":"VCID-shx9-8v43-9qem"},{"vulnerability":"VCID-sy1y-q8ym-f3ft"},{"vulnerability":"VCID-vchm-6wyg-83hk"},{"vulnerability":"VCID-vz6u-kbjy-hkfc"},{"vulnerability":"VCID-wc7x-rsqa-bkcm"},{"vulnerability":"VCID-wmen-dnf4-2kef"},{"vulnerability":"VCID-x4dz-scmh-b7dj"},{"vulnerability":"VCID-x6fh-e77r-pycx"},{"vulnerability":"VCID-zkhz-ckgg-hkat"},{"vulnerability":"VCID-zsnu-88np-fyet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/vyper@0.3.4"},{"url":"http://public2.vulnerablecode.io/api/packages/33497?format=json","purl":"pkg:pypi/vyper@0.3.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1q3x-5eug-afdg"},{"vulnerability":"VCID-1r9c-w5zc-6ker"},{"vulnerability":"VCID-27ed-mhnf-ykgz"},{"vulnerability":"VCID-297e-aexx-ykea"},{"vulnerability":"VCID-3f9m-vgt7-m7gg"},{"vulnerability":"VCID-5zbv-sgt1-y3be"},{"vulnerability":"VCID-7nbf-6rd9-2uap"},{"vulnerability":"VCID-a8ph-1jta-uka1"},{"vulnerability":"VCID-br4v-y1ka-wbh2"},{"vulnerability":"VCID-c8rf-ec8a-gybs"},{"vulnerability":"VCID-cp7n-z6w9-k3bn"},{"vulnerability":"VCID-cpb5-3f58-5ueb"},{"vulnerability":"VCID-djvb-mdjy-b7g5"},{"vulnerability":"VCID-edbb-gb6x-7kby"},{"vulnerability":"VCID-h6ck-r6j1-yuhp"},{"vulnerability":"VCID-m355-31jd-1kfq"},{"vulnerability":"VCID-mw5j-2jm9-j3dv"},{"vulnerability":"VCID-pvjj-s95r-u3f7"},{"vulnerability":"VCID-qfyr-upmm-duea"},{"vulnerability":"VCID-shx9-8v43-9qem"},{"vulnerability":"VCID-sy1y-q8ym-f3ft"},{"vulnerability":"VCID-vchm-6wyg-83hk"},{"vulnerability":"VCID-vz6u-kbjy-hkfc"},{"vulnerability":"VCID-wc7x-rsqa-bkcm"},{"vulnerability":"VCID-wmen-dnf4-2kef"},{"vulnerability":"VCID-x4dz-scmh-b7dj"},{"vulnerability":"VCID-x6fh-e77r-pycx"},{"vulnerability":"VCID-zkhz-ckgg-hkat"},{"vulnerability":"VCID-zsnu-88np-fyet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/vyper@0.3.5"},{"url":"http://public2.vulnerablecode.io/api/packages/33498?format=json","purl":"pkg:pypi/vyper@0.3.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1q3x-5eug-afdg"},{"vulnerability":"VCID-1r9c-w5zc-6ker"},{"vulnerability":"VCID-27ed-mhnf-ykgz"},{"vulnerability":"VCID-297e-aexx-ykea"},{"vulnerability":"VCID-3f9m-vgt7-m7gg"},{"vulnerability":"VCID-5zbv-sgt1-y3be"},{"vulnerability":"VCID-7nbf-6rd9-2uap"},{"vulnerability":"VCID-a8ph-1jta-uka1"},{"vulnerability":"VCID-br4v-y1ka-wbh2"},{"vulnerability":"VCID-c8rf-ec8a-gybs"},{"vulnerability":"VCID-cp7n-z6w9-k3bn"},{"vulnerability":"VCID-cpb5-3f58-5ueb"},{"vulnerability":"VCID-djvb-mdjy-b7g5"},{"vulnerability":"VCID-edbb-gb6x-7kby"},{"vulnerability":"VCID-h6ck-r6j1-yuhp"},{"vulnerability":"VCID-m355-31jd-1kfq"},{"vulnerability":"VCID-mw5j-2jm9-j3dv"},{"vulnerability":"VCID-pvjj-s95r-u3f7"},{"vulnerability":"VCID-qfyr-upmm-duea"},{"vulnerability":"VCID-shx9-8v43-9qem"},{"vulnerability":"VCID-sy1y-q8ym-f3ft"},{"vulnerability":"VCID-vchm-6wyg-83hk"},{"vulnerability":"VCID-vz6u-kbjy-hkfc"},{"vulnerability":"VCID-wc7x-rsqa-bkcm"},{"vulnerability":"VCID-wmen-dnf4-2kef"},{"vulnerability":"VCID-x4dz-scmh-b7dj"},{"vulnerability":"VCID-x6fh-e77r-pycx"},{"vulnerability":"VCID-zkhz-ckgg-hkat"},{"vulnerability":"VCID-zsnu-88np-fyet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/vyper@0.3.6"},{"url":"http://public2.vulnerablecode.io/api/packages/33499?format=json","purl":"pkg:pypi/vyper@0.3.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1q3x-5eug-afdg"},{"vulnerability":"VCID-1r9c-w5zc-6ker"},{"vulnerability":"VCID-27ed-mhnf-ykgz"},{"vulnerability":"VCID-297e-aexx-ykea"},{"vulnerability":"VCID-3f9m-vgt7-m7gg"},{"vulnerability":"VCID-5zbv-sgt1-y3be"},{"vulnerability":"VCID-7nbf-6rd9-2uap"},{"vulnerability":"VCID-a8ph-1jta-uka1"},{"vulnerability":"VCID-br4v-y1ka-wbh2"},{"vulnerability":"VCID-c8rf-ec8a-gybs"},{"vulnerability":"VCID-cp7n-z6w9-k3bn"},{"vulnerability":"VCID-cpb5-3f58-5ueb"},{"vulnerability":"VCID-djvb-mdjy-b7g5"},{"vulnerability":"VCID-edbb-gb6x-7kby"},{"vulnerability":"VCID-h6ck-r6j1-yuhp"},{"vulnerability":"VCID-m355-31jd-1kfq"},{"vulnerability":"VCID-mw5j-2jm9-j3dv"},{"vulnerability":"VCID-pvjj-s95r-u3f7"},{"vulnerability":"VCID-qfyr-upmm-duea"},{"vulnerability":"VCID-shx9-8v43-9qem"},{"vulnerability":"VCID-sy1y-q8ym-f3ft"},{"vulnerability":"VCID-vchm-6wyg-83hk"},{"vulnerability":"VCID-vz6u-kbjy-hkfc"},{"vulnerability":"VCID-wc7x-rsqa-bkcm"},{"vulnerability":"VCID-wmen-dnf4-2kef"},{"vulnerability":"VCID-x4dz-scmh-b7dj"},{"vulnerability":"VCID-x6fh-e77r-pycx"},{"vulnerability":"VCID-zkhz-ckgg-hkat"},{"vulnerability":"VCID-zsnu-88np-fyet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/vyper@0.3.7"},{"url":"http://public2.vulnerablecode.io/api/packages/33500?format=json","purl":"pkg:pypi/vyper@0.3.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1q3x-5eug-afdg"},{"vulnerability":"VCID-1r9c-w5zc-6ker"},{"vulnerability":"VCID-27ed-mhnf-ykgz"},{"vulnerability":"VCID-7nbf-6rd9-2uap"},{"vulnerability":"VCID-br4v-y1ka-wbh2"},{"vulnerability":"VCID-c8rf-ec8a-gybs"},{"vulnerability":"VCID-cp7n-z6w9-k3bn"},{"vulnerability":"VCID-cpb5-3f58-5ueb"},{"vulnerability":"VCID-djvb-mdjy-b7g5"},{"vulnerability":"VCID-h6ck-r6j1-yuhp"},{"vulnerability":"VCID-m355-31jd-1kfq"},{"vulnerability":"VCID-pcsz-xwb8-7yh4"},{"vulnerability":"VCID-qfyr-upmm-duea"},{"vulnerability":"VCID-shx9-8v43-9qem"},{"vulnerability":"VCID-sy1y-q8ym-f3ft"},{"vulnerability":"VCID-vchm-6wyg-83hk"},{"vulnerability":"VCID-vz6u-kbjy-hkfc"},{"vulnerability":"VCID-wc7x-rsqa-bkcm"},{"vulnerability":"VCID-wmen-dnf4-2kef"},{"vulnerability":"VCID-x4dz-scmh-b7dj"},{"vulnerability":"VCID-x6fh-e77r-pycx"},{"vulnerability":"VCID-zkhz-ckgg-hkat"},{"vulnerability":"VCID-zsnu-88np-fyet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/vyper@0.3.8"},{"url":"http://public2.vulnerablecode.io/api/packages/35067?format=json","purl":"pkg:pypi/vyper@0.3.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1q3x-5eug-afdg"},{"vulnerability":"VCID-1r9c-w5zc-6ker"},{"vulnerability":"VCID-7nbf-6rd9-2uap"},{"vulnerability":"VCID-br4v-y1ka-wbh2"},{"vulnerability":"VCID-c8rf-ec8a-gybs"},{"vulnerability":"VCID-cp7n-z6w9-k3bn"},{"vulnerability":"VCID-cpb5-3f58-5ueb"},{"vulnerability":"VCID-djvb-mdjy-b7g5"},{"vulnerability":"VCID-h6ck-r6j1-yuhp"},{"vulnerability":"VCID-m355-31jd-1kfq"},{"vulnerability":"VCID-pcsz-xwb8-7yh4"},{"vulnerability":"VCID-qfyr-upmm-duea"},{"vulnerability":"VCID-shx9-8v43-9qem"},{"vulnerability":"VCID-sy1y-q8ym-f3ft"},{"vulnerability":"VCID-vchm-6wyg-83hk"},{"vulnerability":"VCID-vz6u-kbjy-hkfc"},{"vulnerability":"VCID-wc7x-rsqa-bkcm"},{"vulnerability":"VCID-wmen-dnf4-2kef"},{"vulnerability":"VCID-x4dz-scmh-b7dj"},{"vulnerability":"VCID-x6fh-e77r-pycx"},{"vulnerability":"VCID-zkhz-ckgg-hkat"},{"vulnerability":"VCID-zsnu-88np-fyet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/vyper@0.3.9"},{"url":"http://public2.vulnerablecode.io/api/packages/35619?format=json","purl":"pkg:pypi/vyper@0.3.10rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1q3x-5eug-afdg"},{"vulnerability":"VCID-1r9c-w5zc-6ker"},{"vulnerability":"VCID-br4v-y1ka-wbh2"},{"vulnerability":"VCID-c8rf-ec8a-gybs"},{"vulnerability":"VCID-cp7n-z6w9-k3bn"},{"vulnerability":"VCID-cpb5-3f58-5ueb"},{"vulnerability":"VCID-djvb-mdjy-b7g5"},{"vulnerability":"VCID-h6ck-r6j1-yuhp"},{"vulnerability":"VCID-m355-31jd-1kfq"},{"vulnerability":"VCID-pcsz-xwb8-7yh4"},{"vulnerability":"VCID-qfyr-upmm-duea"},{"vulnerability":"VCID-shx9-8v43-9qem"},{"vulnerability":"VCID-vchm-6wyg-83hk"},{"vulnerability":"VCID-vz6u-kbjy-hkfc"},{"vulnerability":"VCID-wc7x-rsqa-bkcm"},{"vulnerability":"VCID-wmen-dnf4-2kef"},{"vulnerability":"VCID-x4dz-scmh-b7dj"},{"vulnerability":"VCID-x6fh-e77r-pycx"},{"vulnerability":"VCID-zkhz-ckgg-hkat"},{"vulnerability":"VCID-zsnu-88np-fyet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/vyper@0.3.10rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/35875?format=json","purl":"pkg:pypi/vyper@0.3.10rc2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1q3x-5eug-afdg"},{"vulnerability":"VCID-1r9c-w5zc-6ker"},{"vulnerability":"VCID-br4v-y1ka-wbh2"},{"vulnerability":"VCID-c8rf-ec8a-gybs"},{"vulnerability":"VCID-cp7n-z6w9-k3bn"},{"vulnerability":"VCID-cpb5-3f58-5ueb"},{"vulnerability":"VCID-djvb-mdjy-b7g5"},{"vulnerability":"VCID-h6ck-r6j1-yuhp"},{"vulnerability":"VCID-m355-31jd-1kfq"},{"vulnerability":"VCID-pcsz-xwb8-7yh4"},{"vulnerability":"VCID-qfyr-upmm-duea"},{"vulnerability":"VCID-shx9-8v43-9qem"},{"vulnerability":"VCID-vchm-6wyg-83hk"},{"vulnerability":"VCID-vz6u-kbjy-hkfc"},{"vulnerability":"VCID-wc7x-rsqa-bkcm"},{"vulnerability":"VCID-wmen-dnf4-2kef"},{"vulnerability":"VCID-x4dz-scmh-b7dj"},{"vulnerability":"VCID-x6fh-e77r-pycx"},{"vulnerability":"VCID-zkhz-ckgg-hkat"},{"vulnerability":"VCID-zsnu-88np-fyet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/vyper@0.3.10rc2"},{"url":"http://public2.vulnerablecode.io/api/packages/35876?format=json","purl":"pkg:pypi/vyper@0.3.10rc3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1q3x-5eug-afdg"},{"vulnerability":"VCID-1r9c-w5zc-6ker"},{"vulnerability":"VCID-br4v-y1ka-wbh2"},{"vulnerability":"VCID-c8rf-ec8a-gybs"},{"vulnerability":"VCID-cp7n-z6w9-k3bn"},{"vulnerability":"VCID-cpb5-3f58-5ueb"},{"vulnerability":"VCID-djvb-mdjy-b7g5"},{"vulnerability":"VCID-h6ck-r6j1-yuhp"},{"vulnerability":"VCID-m355-31jd-1kfq"},{"vulnerability":"VCID-pcsz-xwb8-7yh4"},{"vulnerability":"VCID-qfyr-upmm-duea"},{"vulnerability":"VCID-shx9-8v43-9qem"},{"vulnerability":"VCID-vchm-6wyg-83hk"},{"vulnerability":"VCID-vz6u-kbjy-hkfc"},{"vulnerability":"VCID-wc7x-rsqa-bkcm"},{"vulnerability":"VCID-wmen-dnf4-2kef"},{"vulnerability":"VCID-x4dz-scmh-b7dj"},{"vulnerability":"VCID-x6fh-e77r-pycx"},{"vulnerability":"VCID-zkhz-ckgg-hkat"},{"vulnerability":"VCID-zsnu-88np-fyet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/vyper@0.3.10rc3"},{"url":"http://public2.vulnerablecode.io/api/packages/35877?format=json","purl":"pkg:pypi/vyper@0.3.10rc4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1q3x-5eug-afdg"},{"vulnerability":"VCID-1r9c-w5zc-6ker"},{"vulnerability":"VCID-br4v-y1ka-wbh2"},{"vulnerability":"VCID-c8rf-ec8a-gybs"},{"vulnerability":"VCID-cp7n-z6w9-k3bn"},{"vulnerability":"VCID-cpb5-3f58-5ueb"},{"vulnerability":"VCID-djvb-mdjy-b7g5"},{"vulnerability":"VCID-h6ck-r6j1-yuhp"},{"vulnerability":"VCID-m355-31jd-1kfq"},{"vulnerability":"VCID-pcsz-xwb8-7yh4"},{"vulnerability":"VCID-qfyr-upmm-duea"},{"vulnerability":"VCID-shx9-8v43-9qem"},{"vulnerability":"VCID-vchm-6wyg-83hk"},{"vulnerability":"VCID-vz6u-kbjy-hkfc"},{"vulnerability":"VCID-wc7x-rsqa-bkcm"},{"vulnerability":"VCID-wmen-dnf4-2kef"},{"vulnerability":"VCID-x4dz-scmh-b7dj"},{"vulnerability":"VCID-x6fh-e77r-pycx"},{"vulnerability":"VCID-zkhz-ckgg-hkat"},{"vulnerability":"VCID-zsnu-88np-fyet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/vyper@0.3.10rc4"},{"url":"http://public2.vulnerablecode.io/api/packages/35878?format=json","purl":"pkg:pypi/vyper@0.3.10rc5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1q3x-5eug-afdg"},{"vulnerability":"VCID-1r9c-w5zc-6ker"},{"vulnerability":"VCID-br4v-y1ka-wbh2"},{"vulnerability":"VCID-c8rf-ec8a-gybs"},{"vulnerability":"VCID-cp7n-z6w9-k3bn"},{"vulnerability":"VCID-cpb5-3f58-5ueb"},{"vulnerability":"VCID-djvb-mdjy-b7g5"},{"vulnerability":"VCID-h6ck-r6j1-yuhp"},{"vulnerability":"VCID-m355-31jd-1kfq"},{"vulnerability":"VCID-pcsz-xwb8-7yh4"},{"vulnerability":"VCID-qfyr-upmm-duea"},{"vulnerability":"VCID-shx9-8v43-9qem"},{"vulnerability":"VCID-vchm-6wyg-83hk"},{"vulnerability":"VCID-vz6u-kbjy-hkfc"},{"vulnerability":"VCID-wc7x-rsqa-bkcm"},{"vulnerability":"VCID-wmen-dnf4-2kef"},{"vulnerability":"VCID-x4dz-scmh-b7dj"},{"vulnerability":"VCID-x6fh-e77r-pycx"},{"vulnerability":"VCID-zkhz-ckgg-hkat"},{"vulnerability":"VCID-zsnu-88np-fyet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/vyper@0.3.10rc5"}],"references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2023-191.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2023-191.yaml"},{"reference_url":"https://github.com/vyperlang/vyper","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/vyperlang/vyper"},{"reference_url":"https://github.com/vyperlang/vyper/pull/3626","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"url":"https://github.com/vyperlang/vyper/pull/3626"},{"reference_url":"https://github.com/vyperlang/vyper/security/advisories/GHSA-cx2q-hfxr-rj97","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"url":"https://github.com/vyperlang/vyper/security/advisories/GHSA-cx2q-hfxr-rj97"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42460","reference_id":"CVE-2023-42460","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42460"},{"reference_url":"https://github.com/advisories/GHSA-cx2q-hfxr-rj97","reference_id":"GHSA-cx2q-hfxr-rj97","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-cx2q-hfxr-rj97"}],"weaknesses":[{"cwe_id":682,"name":"Incorrect Calculation","description":"The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"7.5 - 7.5","exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1q3x-5eug-afdg"}