Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-uwx6-kq7y-dfa4

Summary

Potential Command Injection
Untrusted input passed in the call to libnotify.notify could result in execution of shell commands. Callers may be unaware of this.

Aliases

alias	GMS-2013-11

Fixed_packages

url	pkg:npm/libnotify@1.0.4
purl	pkg:npm/libnotify@1.0.4
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:npm/libnotify@1.0.4

Affected_packages

url pkg:npm/libnotify@1.0.3

purl pkg:npm/libnotify@1.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-tjc9-6eex-4fh7

vulnerability	VCID-uwx6-kq7y-dfa4

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/libnotify@1.0.3

References

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uwx6-kq7y-dfa4

Vulnerability Instance