Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-zzey-wstd-p7e3
Summary
Cross-site Scripting
RubyGems contains a Cross Site Scripting (XSS) vulnerability in gem server display of homepage attribute that can result in XSS. This attack appears to be exploitable by the victim browsing to a malicious gem on a vulnerable gem server.
Aliases
0
alias CVE-2018-1000078
1
alias GHSA-87qx-g5wg-mwmj
Fixed_packages
0
url pkg:deb/debian/jruby@1.7.26-1%2Bdeb9u1
purl pkg:deb/debian/jruby@1.7.26-1%2Bdeb9u1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jruby@1.7.26-1%252Bdeb9u1
1
url pkg:deb/debian/jruby@9.1.17.0-1?distro=trixie
purl pkg:deb/debian/jruby@9.1.17.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jruby@9.1.17.0-1%3Fdistro=trixie
2
url pkg:deb/debian/jruby@9.3.9.0%2Bds-8?distro=trixie
purl pkg:deb/debian/jruby@9.3.9.0%2Bds-8?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cran-uhew-auat
1
vulnerability VCID-v5r6-nhe3-87dz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jruby@9.3.9.0%252Bds-8%3Fdistro=trixie
3
url pkg:deb/debian/jruby@9.4.8.0%2Bds-3?distro=trixie
purl pkg:deb/debian/jruby@9.4.8.0%2Bds-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jruby@9.4.8.0%252Bds-3%3Fdistro=trixie
4
url pkg:deb/debian/rubygems@3.2.0~rc.1-1?distro=trixie
purl pkg:deb/debian/rubygems@3.2.0~rc.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rubygems@3.2.0~rc.1-1%3Fdistro=trixie
5
url pkg:deb/debian/rubygems@3.2.5-2
purl pkg:deb/debian/rubygems@3.2.5-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zz3m-f23k-6kec
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rubygems@3.2.5-2
6
url pkg:deb/debian/rubygems@3.2.5-2?distro=trixie
purl pkg:deb/debian/rubygems@3.2.5-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zz3m-f23k-6kec
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rubygems@3.2.5-2%3Fdistro=trixie
7
url pkg:deb/debian/rubygems@3.3.15-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/rubygems@3.3.15-2%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rubygems@3.3.15-2%252Bdeb12u1%3Fdistro=trixie
8
url pkg:deb/debian/rubygems@3.6.7-2?distro=trixie
purl pkg:deb/debian/rubygems@3.6.7-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rubygems@3.6.7-2%3Fdistro=trixie
9
url pkg:gem/rubygems-update@2.5.1
purl pkg:gem/rubygems-update@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-68hc-d8u1-yye5
1
vulnerability VCID-bb6n-nq7v-8qex
2
vulnerability VCID-br82-gd5d-pqew
3
vulnerability VCID-c7rs-vbjr-nyfz
4
vulnerability VCID-nd17-pxzx-nyba
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rubygems-update@2.5.1
10
url pkg:gem/rubygems-update@2.7.6
purl pkg:gem/rubygems-update@2.7.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ab1-3xjd-aqbp
1
vulnerability VCID-e9b5-m5x2-z3fb
2
vulnerability VCID-hyvx-ab9s-uyby
3
vulnerability VCID-k7u9-hhnh-m7f5
4
vulnerability VCID-kxbg-rg3f-ruad
5
vulnerability VCID-rpe2-d8ht-u3ht
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rubygems-update@2.7.6
11
url pkg:maven/org.jruby/jruby-stdlib@9.1.16.0
purl pkg:maven/org.jruby/jruby-stdlib@9.1.16.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jruby/jruby-stdlib@9.1.16.0
Affected_packages
0
url pkg:deb/debian/jruby@1.5.1-1
purl pkg:deb/debian/jruby@1.5.1-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-e7rv-fv84-jygh
2
vulnerability VCID-k6gg-djg6-kbh5
3
vulnerability VCID-qrbv-et5k-wkdk
4
vulnerability VCID-xqpw-9uap-kugb
5
vulnerability VCID-yxa4-p6gs-7bgr
6
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jruby@1.5.1-1
1
url pkg:deb/debian/jruby@1.5.1-1%2Bdeb6u1
purl pkg:deb/debian/jruby@1.5.1-1%2Bdeb6u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-e7rv-fv84-jygh
2
vulnerability VCID-k6gg-djg6-kbh5
3
vulnerability VCID-qrbv-et5k-wkdk
4
vulnerability VCID-xqpw-9uap-kugb
5
vulnerability VCID-yxa4-p6gs-7bgr
6
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jruby@1.5.1-1%252Bdeb6u1
2
url pkg:deb/debian/jruby@1.5.6-5
purl pkg:deb/debian/jruby@1.5.6-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-e7rv-fv84-jygh
2
vulnerability VCID-k6gg-djg6-kbh5
3
vulnerability VCID-qrbv-et5k-wkdk
4
vulnerability VCID-xqpw-9uap-kugb
5
vulnerability VCID-yxa4-p6gs-7bgr
6
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jruby@1.5.6-5
3
url pkg:deb/debian/jruby@1.5.6-9
purl pkg:deb/debian/jruby@1.5.6-9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-e7rv-fv84-jygh
2
vulnerability VCID-k6gg-djg6-kbh5
3
vulnerability VCID-qrbv-et5k-wkdk
4
vulnerability VCID-xqpw-9uap-kugb
5
vulnerability VCID-yxa4-p6gs-7bgr
6
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jruby@1.5.6-9
4
url pkg:deb/debian/rubygems@1.8.24-1
purl pkg:deb/debian/rubygems@1.8.24-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ab1-3xjd-aqbp
1
vulnerability VCID-3bue-qvm7-2fby
2
vulnerability VCID-68hc-d8u1-yye5
3
vulnerability VCID-bddt-hdtz-4qhp
4
vulnerability VCID-c7rs-vbjr-nyfz
5
vulnerability VCID-hyvx-ab9s-uyby
6
vulnerability VCID-k6gg-djg6-kbh5
7
vulnerability VCID-k7u9-hhnh-m7f5
8
vulnerability VCID-kxbg-rg3f-ruad
9
vulnerability VCID-nd17-pxzx-nyba
10
vulnerability VCID-ptwy-1jy5-4ugp
11
vulnerability VCID-qrbv-et5k-wkdk
12
vulnerability VCID-xqpw-9uap-kugb
13
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rubygems@1.8.24-1
5
url pkg:gem/rubygems-update@2.3.0
purl pkg:gem/rubygems-update@2.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-68hc-d8u1-yye5
2
vulnerability VCID-bb6n-nq7v-8qex
3
vulnerability VCID-br82-gd5d-pqew
4
vulnerability VCID-c7rs-vbjr-nyfz
5
vulnerability VCID-c9w3-xh7j-57bq
6
vulnerability VCID-e7rv-fv84-jygh
7
vulnerability VCID-k6gg-djg6-kbh5
8
vulnerability VCID-nd17-pxzx-nyba
9
vulnerability VCID-qrbv-et5k-wkdk
10
vulnerability VCID-t8p2-dj3e-r7gt
11
vulnerability VCID-xqpw-9uap-kugb
12
vulnerability VCID-yxa4-p6gs-7bgr
13
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rubygems-update@2.3.0
6
url pkg:gem/rubygems-update@2.4.0
purl pkg:gem/rubygems-update@2.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-68hc-d8u1-yye5
2
vulnerability VCID-bb6n-nq7v-8qex
3
vulnerability VCID-br82-gd5d-pqew
4
vulnerability VCID-c7rs-vbjr-nyfz
5
vulnerability VCID-c9w3-xh7j-57bq
6
vulnerability VCID-e7rv-fv84-jygh
7
vulnerability VCID-k6gg-djg6-kbh5
8
vulnerability VCID-nd17-pxzx-nyba
9
vulnerability VCID-qrbv-et5k-wkdk
10
vulnerability VCID-t8p2-dj3e-r7gt
11
vulnerability VCID-xqpw-9uap-kugb
12
vulnerability VCID-yxa4-p6gs-7bgr
13
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rubygems-update@2.4.0
7
url pkg:gem/rubygems-update@2.4.1
purl pkg:gem/rubygems-update@2.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-68hc-d8u1-yye5
2
vulnerability VCID-bb6n-nq7v-8qex
3
vulnerability VCID-br82-gd5d-pqew
4
vulnerability VCID-c7rs-vbjr-nyfz
5
vulnerability VCID-c9w3-xh7j-57bq
6
vulnerability VCID-e7rv-fv84-jygh
7
vulnerability VCID-k6gg-djg6-kbh5
8
vulnerability VCID-nd17-pxzx-nyba
9
vulnerability VCID-qrbv-et5k-wkdk
10
vulnerability VCID-t8p2-dj3e-r7gt
11
vulnerability VCID-xqpw-9uap-kugb
12
vulnerability VCID-yxa4-p6gs-7bgr
13
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rubygems-update@2.4.1
8
url pkg:gem/rubygems-update@2.4.2
purl pkg:gem/rubygems-update@2.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-68hc-d8u1-yye5
2
vulnerability VCID-bb6n-nq7v-8qex
3
vulnerability VCID-br82-gd5d-pqew
4
vulnerability VCID-c7rs-vbjr-nyfz
5
vulnerability VCID-c9w3-xh7j-57bq
6
vulnerability VCID-e7rv-fv84-jygh
7
vulnerability VCID-k6gg-djg6-kbh5
8
vulnerability VCID-nd17-pxzx-nyba
9
vulnerability VCID-qrbv-et5k-wkdk
10
vulnerability VCID-t8p2-dj3e-r7gt
11
vulnerability VCID-xqpw-9uap-kugb
12
vulnerability VCID-yxa4-p6gs-7bgr
13
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rubygems-update@2.4.2
9
url pkg:gem/rubygems-update@2.4.3
purl pkg:gem/rubygems-update@2.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-68hc-d8u1-yye5
2
vulnerability VCID-bb6n-nq7v-8qex
3
vulnerability VCID-br82-gd5d-pqew
4
vulnerability VCID-c7rs-vbjr-nyfz
5
vulnerability VCID-c9w3-xh7j-57bq
6
vulnerability VCID-e7rv-fv84-jygh
7
vulnerability VCID-k6gg-djg6-kbh5
8
vulnerability VCID-nd17-pxzx-nyba
9
vulnerability VCID-qrbv-et5k-wkdk
10
vulnerability VCID-t8p2-dj3e-r7gt
11
vulnerability VCID-xqpw-9uap-kugb
12
vulnerability VCID-yxa4-p6gs-7bgr
13
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rubygems-update@2.4.3
10
url pkg:gem/rubygems-update@2.4.4
purl pkg:gem/rubygems-update@2.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-68hc-d8u1-yye5
2
vulnerability VCID-bb6n-nq7v-8qex
3
vulnerability VCID-br82-gd5d-pqew
4
vulnerability VCID-c7rs-vbjr-nyfz
5
vulnerability VCID-c9w3-xh7j-57bq
6
vulnerability VCID-e7rv-fv84-jygh
7
vulnerability VCID-k6gg-djg6-kbh5
8
vulnerability VCID-nd17-pxzx-nyba
9
vulnerability VCID-qrbv-et5k-wkdk
10
vulnerability VCID-t8p2-dj3e-r7gt
11
vulnerability VCID-xqpw-9uap-kugb
12
vulnerability VCID-yxa4-p6gs-7bgr
13
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rubygems-update@2.4.4
11
url pkg:gem/rubygems-update@2.4.5
purl pkg:gem/rubygems-update@2.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-68hc-d8u1-yye5
2
vulnerability VCID-bb6n-nq7v-8qex
3
vulnerability VCID-br82-gd5d-pqew
4
vulnerability VCID-c7rs-vbjr-nyfz
5
vulnerability VCID-c9w3-xh7j-57bq
6
vulnerability VCID-e7rv-fv84-jygh
7
vulnerability VCID-k6gg-djg6-kbh5
8
vulnerability VCID-nd17-pxzx-nyba
9
vulnerability VCID-qrbv-et5k-wkdk
10
vulnerability VCID-t8p2-dj3e-r7gt
11
vulnerability VCID-xqpw-9uap-kugb
12
vulnerability VCID-yxa4-p6gs-7bgr
13
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rubygems-update@2.4.5
12
url pkg:gem/rubygems-update@2.4.6
purl pkg:gem/rubygems-update@2.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-68hc-d8u1-yye5
2
vulnerability VCID-bb6n-nq7v-8qex
3
vulnerability VCID-br82-gd5d-pqew
4
vulnerability VCID-c7rs-vbjr-nyfz
5
vulnerability VCID-c9w3-xh7j-57bq
6
vulnerability VCID-e7rv-fv84-jygh
7
vulnerability VCID-k6gg-djg6-kbh5
8
vulnerability VCID-nd17-pxzx-nyba
9
vulnerability VCID-qrbv-et5k-wkdk
10
vulnerability VCID-t8p2-dj3e-r7gt
11
vulnerability VCID-xqpw-9uap-kugb
12
vulnerability VCID-yxa4-p6gs-7bgr
13
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rubygems-update@2.4.6
13
url pkg:gem/rubygems-update@2.4.7
purl pkg:gem/rubygems-update@2.4.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-68hc-d8u1-yye5
2
vulnerability VCID-bb6n-nq7v-8qex
3
vulnerability VCID-br82-gd5d-pqew
4
vulnerability VCID-c7rs-vbjr-nyfz
5
vulnerability VCID-e7rv-fv84-jygh
6
vulnerability VCID-k6gg-djg6-kbh5
7
vulnerability VCID-nd17-pxzx-nyba
8
vulnerability VCID-qrbv-et5k-wkdk
9
vulnerability VCID-t8p2-dj3e-r7gt
10
vulnerability VCID-xqpw-9uap-kugb
11
vulnerability VCID-yxa4-p6gs-7bgr
12
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rubygems-update@2.4.7
14
url pkg:gem/rubygems-update@2.4.8
purl pkg:gem/rubygems-update@2.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-68hc-d8u1-yye5
2
vulnerability VCID-bb6n-nq7v-8qex
3
vulnerability VCID-br82-gd5d-pqew
4
vulnerability VCID-c7rs-vbjr-nyfz
5
vulnerability VCID-e7rv-fv84-jygh
6
vulnerability VCID-k6gg-djg6-kbh5
7
vulnerability VCID-nd17-pxzx-nyba
8
vulnerability VCID-qrbv-et5k-wkdk
9
vulnerability VCID-xqpw-9uap-kugb
10
vulnerability VCID-yxa4-p6gs-7bgr
11
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rubygems-update@2.4.8
15
url pkg:gem/rubygems-update@2.5.0
purl pkg:gem/rubygems-update@2.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-68hc-d8u1-yye5
2
vulnerability VCID-bb6n-nq7v-8qex
3
vulnerability VCID-br82-gd5d-pqew
4
vulnerability VCID-c7rs-vbjr-nyfz
5
vulnerability VCID-e7rv-fv84-jygh
6
vulnerability VCID-k6gg-djg6-kbh5
7
vulnerability VCID-nd17-pxzx-nyba
8
vulnerability VCID-qrbv-et5k-wkdk
9
vulnerability VCID-xqpw-9uap-kugb
10
vulnerability VCID-yxa4-p6gs-7bgr
11
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rubygems-update@2.5.0
16
url pkg:rpm/redhat/rh-ruby23-ruby@2.3.8-69?arch=el7
purl pkg:rpm/redhat/rh-ruby23-ruby@2.3.8-69?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-361p-4hj9-q7hh
1
vulnerability VCID-3bue-qvm7-2fby
2
vulnerability VCID-5g8n-wc8m-1kbe
3
vulnerability VCID-5n7x-6wez-myfx
4
vulnerability VCID-buqt-chxx-nqf9
5
vulnerability VCID-e7rv-fv84-jygh
6
vulnerability VCID-gvp7-3hy2-3bbp
7
vulnerability VCID-hmb2-yyf8-7ff4
8
vulnerability VCID-k6gg-djg6-kbh5
9
vulnerability VCID-kj49-ndfe-vqfc
10
vulnerability VCID-mes6-r6ra-7yaj
11
vulnerability VCID-qrbv-et5k-wkdk
12
vulnerability VCID-xqpw-9uap-kugb
13
vulnerability VCID-yxa4-p6gs-7bgr
14
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-ruby23-ruby@2.3.8-69%3Farch=el7
17
url pkg:rpm/redhat/rh-ruby23-ruby@2.3.8-69?arch=el6
purl pkg:rpm/redhat/rh-ruby23-ruby@2.3.8-69?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-361p-4hj9-q7hh
1
vulnerability VCID-3bue-qvm7-2fby
2
vulnerability VCID-5g8n-wc8m-1kbe
3
vulnerability VCID-5n7x-6wez-myfx
4
vulnerability VCID-buqt-chxx-nqf9
5
vulnerability VCID-e7rv-fv84-jygh
6
vulnerability VCID-gvp7-3hy2-3bbp
7
vulnerability VCID-hmb2-yyf8-7ff4
8
vulnerability VCID-k6gg-djg6-kbh5
9
vulnerability VCID-kj49-ndfe-vqfc
10
vulnerability VCID-mes6-r6ra-7yaj
11
vulnerability VCID-qrbv-et5k-wkdk
12
vulnerability VCID-xqpw-9uap-kugb
13
vulnerability VCID-yxa4-p6gs-7bgr
14
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-ruby23-ruby@2.3.8-69%3Farch=el6
18
url pkg:rpm/redhat/rh-ruby24-ruby@2.4.5-91?arch=el7
purl pkg:rpm/redhat/rh-ruby24-ruby@2.4.5-91?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-361p-4hj9-q7hh
1
vulnerability VCID-3bue-qvm7-2fby
2
vulnerability VCID-5g8n-wc8m-1kbe
3
vulnerability VCID-5n7x-6wez-myfx
4
vulnerability VCID-buqt-chxx-nqf9
5
vulnerability VCID-e7rv-fv84-jygh
6
vulnerability VCID-gvp7-3hy2-3bbp
7
vulnerability VCID-hmb2-yyf8-7ff4
8
vulnerability VCID-k6gg-djg6-kbh5
9
vulnerability VCID-kj49-ndfe-vqfc
10
vulnerability VCID-mes6-r6ra-7yaj
11
vulnerability VCID-qrbv-et5k-wkdk
12
vulnerability VCID-xqpw-9uap-kugb
13
vulnerability VCID-yxa4-p6gs-7bgr
14
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-ruby24-ruby@2.4.5-91%3Farch=el7
19
url pkg:rpm/redhat/rh-ruby24-ruby@2.4.5-91?arch=el6
purl pkg:rpm/redhat/rh-ruby24-ruby@2.4.5-91?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-361p-4hj9-q7hh
1
vulnerability VCID-3bue-qvm7-2fby
2
vulnerability VCID-5g8n-wc8m-1kbe
3
vulnerability VCID-5n7x-6wez-myfx
4
vulnerability VCID-buqt-chxx-nqf9
5
vulnerability VCID-e7rv-fv84-jygh
6
vulnerability VCID-gvp7-3hy2-3bbp
7
vulnerability VCID-hmb2-yyf8-7ff4
8
vulnerability VCID-k6gg-djg6-kbh5
9
vulnerability VCID-kj49-ndfe-vqfc
10
vulnerability VCID-mes6-r6ra-7yaj
11
vulnerability VCID-qrbv-et5k-wkdk
12
vulnerability VCID-xqpw-9uap-kugb
13
vulnerability VCID-yxa4-p6gs-7bgr
14
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-ruby24-ruby@2.4.5-91%3Farch=el6
20
url pkg:rpm/redhat/rh-ruby25-ruby@2.5.3-6?arch=el7
purl pkg:rpm/redhat/rh-ruby25-ruby@2.5.3-6?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-361p-4hj9-q7hh
1
vulnerability VCID-3bue-qvm7-2fby
2
vulnerability VCID-5g8n-wc8m-1kbe
3
vulnerability VCID-5n7x-6wez-myfx
4
vulnerability VCID-buqt-chxx-nqf9
5
vulnerability VCID-e7rv-fv84-jygh
6
vulnerability VCID-gvp7-3hy2-3bbp
7
vulnerability VCID-hmb2-yyf8-7ff4
8
vulnerability VCID-k6gg-djg6-kbh5
9
vulnerability VCID-kj49-ndfe-vqfc
10
vulnerability VCID-mes6-r6ra-7yaj
11
vulnerability VCID-qrbv-et5k-wkdk
12
vulnerability VCID-xqpw-9uap-kugb
13
vulnerability VCID-yxa4-p6gs-7bgr
14
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-ruby25-ruby@2.5.3-6%3Farch=el7
21
url pkg:rpm/redhat/ruby@2.0.0.648-35?arch=el7_5
purl pkg:rpm/redhat/ruby@2.0.0.648-35?arch=el7_5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-5n7x-6wez-myfx
2
vulnerability VCID-e7rv-fv84-jygh
3
vulnerability VCID-k6gg-djg6-kbh5
4
vulnerability VCID-mes6-r6ra-7yaj
5
vulnerability VCID-qrbv-et5k-wkdk
6
vulnerability VCID-xqpw-9uap-kugb
7
vulnerability VCID-yxa4-p6gs-7bgr
8
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby@2.0.0.648-35%3Farch=el7_5
22
url pkg:rpm/redhat/ruby@2.0.0.648-35?arch=el7_4
purl pkg:rpm/redhat/ruby@2.0.0.648-35?arch=el7_4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-5n7x-6wez-myfx
2
vulnerability VCID-e7rv-fv84-jygh
3
vulnerability VCID-k6gg-djg6-kbh5
4
vulnerability VCID-mes6-r6ra-7yaj
5
vulnerability VCID-qrbv-et5k-wkdk
6
vulnerability VCID-xqpw-9uap-kugb
7
vulnerability VCID-yxa4-p6gs-7bgr
8
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby@2.0.0.648-35%3Farch=el7_4
23
url pkg:rpm/redhat/ruby@2.0.0.648-36?arch=el7
purl pkg:rpm/redhat/ruby@2.0.0.648-36?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-361p-4hj9-q7hh
1
vulnerability VCID-3bue-qvm7-2fby
2
vulnerability VCID-5g8n-wc8m-1kbe
3
vulnerability VCID-5n7x-6wez-myfx
4
vulnerability VCID-buqt-chxx-nqf9
5
vulnerability VCID-e7rv-fv84-jygh
6
vulnerability VCID-gvp7-3hy2-3bbp
7
vulnerability VCID-hmb2-yyf8-7ff4
8
vulnerability VCID-k6gg-djg6-kbh5
9
vulnerability VCID-mes6-r6ra-7yaj
10
vulnerability VCID-qrbv-et5k-wkdk
11
vulnerability VCID-xqpw-9uap-kugb
12
vulnerability VCID-yxa4-p6gs-7bgr
13
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby@2.0.0.648-36%3Farch=el7
24
url pkg:rpm/redhat/ruby@2.0.0.648-36?arch=el7_6
purl pkg:rpm/redhat/ruby@2.0.0.648-36?arch=el7_6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bue-qvm7-2fby
1
vulnerability VCID-5n7x-6wez-myfx
2
vulnerability VCID-e7rv-fv84-jygh
3
vulnerability VCID-k6gg-djg6-kbh5
4
vulnerability VCID-mes6-r6ra-7yaj
5
vulnerability VCID-qrbv-et5k-wkdk
6
vulnerability VCID-xqpw-9uap-kugb
7
vulnerability VCID-yxa4-p6gs-7bgr
8
vulnerability VCID-zzey-wstd-p7e3
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby@2.0.0.648-36%3Farch=el7_6
References
0
reference_url http://blog.rubygems.org/2018/02/15/2.7.6-released.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://blog.rubygems.org/2018/02/15/2.7.6-released.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html
2
reference_url https://access.redhat.com/errata/RHSA-2018:3729
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3729
3
reference_url https://access.redhat.com/errata/RHSA-2018:3730
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3730
4
reference_url https://access.redhat.com/errata/RHSA-2018:3731
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3731
5
reference_url https://access.redhat.com/errata/RHSA-2019:2028
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:2028
6
reference_url https://access.redhat.com/errata/RHSA-2020:0542
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0542
7
reference_url https://access.redhat.com/errata/RHSA-2020:0591
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0591
8
reference_url https://access.redhat.com/errata/RHSA-2020:0663
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0663
9
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000078.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000078.json
10
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000078
reference_id
reference_type
scores
0
value 0.00823
scoring_system epss
scoring_elements 0.74798
published_at 2026-06-04T12:55:00Z
1
value 0.00823
scoring_system epss
scoring_elements 0.74829
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000078
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17405
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17405
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17742
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17742
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17790
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17790
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000073
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000073
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000074
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000074
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000075
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000075
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000076
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000076
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000077
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000078
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000079
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6914
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6914
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8777
23
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8778
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8779
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8779
25
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8780
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8780
26
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
27
reference_url https://github.com/jruby/jruby/commit/0b06b48ab4432237ce5fc1bef47f2c6bcf7843f7
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/jruby/jruby/commit/0b06b48ab4432237ce5fc1bef47f2c6bcf7843f7
28
reference_url https://github.com/rubygems/rubygems/commit/5971b486d4dbb2bad5d3445b3801c456eb0ce183
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubygems/rubygems/commit/5971b486d4dbb2bad5d3445b3801c456eb0ce183
29
reference_url https://github.com/rubygems/rubygems/commit/66a28b9275551384fdab45f3591a82d6b59952cb
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubygems/rubygems/commit/66a28b9275551384fdab45f3591a82d6b59952cb
30
reference_url https://lists.debian.org/debian-lts-announce/2018/04/msg00000.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2018/04/msg00000.html
31
reference_url https://lists.debian.org/debian-lts-announce/2018/04/msg00001.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2018/04/msg00001.html
32
reference_url https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html
33
reference_url https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
34
reference_url https://lists.debian.org/debian-lts-announce/2019/05/msg00028.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2019/05/msg00028.html
35
reference_url https://usn.ubuntu.com/3621-1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/3621-1
36
reference_url https://usn.ubuntu.com/3621-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/3621-1/
37
reference_url https://www.debian.org/security/2018/dsa-4219
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2018/dsa-4219
38
reference_url https://www.debian.org/security/2018/dsa-4259
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2018/dsa-4259
39
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1547425
reference_id 1547425
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1547425
40
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1000078
reference_id CVE-2018-1000078
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-1000078
41
reference_url https://github.com/advisories/GHSA-87qx-g5wg-mwmj
reference_id GHSA-87qx-g5wg-mwmj
reference_type
scores
url https://github.com/advisories/GHSA-87qx-g5wg-mwmj
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-zzey-wstd-p7e3