{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40249?format=json","vulnerability_id":"VCID-d7cx-7mkv-3qhe","summary":"Path Traversal\n`Smarty_Security::isTrustedResourceDir()` in Smarty is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files.","aliases":[{"alias":"CVE-2018-13982"},{"alias":"GHSA-7gfx-wxfh-7rvm"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56421?format=json","purl":"pkg:composer/smarty/smarty@3.1.33","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.33"},{"url":"http://public2.vulnerablecode.io/api/packages/129042?format=json","purl":"pkg:deb/debian/smarty3@3.1.33%2B20180830.1.3a78a21f%2Bselfpack1-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.33%252B20180830.1.3a78a21f%252Bselfpack1-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/516372?format=json","purl":"pkg:deb/debian/smarty3@3.1.33%2B20180830.1.3a78a21f%2Bselfpack1-1%2Bdeb10u1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.33%252B20180830.1.3a78a21f%252Bselfpack1-1%252Bdeb10u1"},{"url":"http://public2.vulnerablecode.io/api/packages/129034?format=json","purl":"pkg:deb/debian/smarty3@3.1.39-2%2Bdeb11u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.39-2%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/129032?format=json","purl":"pkg:deb/debian/smarty3@3.1.47-2%2Bdeb12u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.47-2%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/129035?format=json","purl":"pkg:deb/debian/smarty3@3.1.48-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.48-2%3Fdistro=trixie"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/200024?format=json","purl":"pkg:composer/smarty/smarty@2.6.24","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3nky-rj9a-dyb7"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-5avg-sw37-g3ff"},{"vulnerability":"VCID-b4d4-pqtp-wbek"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.24"},{"url":"http://public2.vulnerablecode.io/api/packages/200025?format=json","purl":"pkg:composer/smarty/smarty@2.6.25","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3nky-rj9a-dyb7"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-5avg-sw37-g3ff"},{"vulnerability":"VCID-b4d4-pqtp-wbek"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.25"},{"url":"http://public2.vulnerablecode.io/api/packages/200026?format=json","purl":"pkg:composer/smarty/smarty@2.6.26","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3nky-rj9a-dyb7"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-5avg-sw37-g3ff"},{"vulnerability":"VCID-b4d4-pqtp-wbek"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.26"},{"url":"http://public2.vulnerablecode.io/api/packages/200027?format=json","purl":"pkg:composer/smarty/smarty@2.6.27","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3nky-rj9a-dyb7"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-5avg-sw37-g3ff"},{"vulnerability":"VCID-b4d4-pqtp-wbek"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.27"},{"url":"http://public2.vulnerablecode.io/api/packages/200028?format=json","purl":"pkg:composer/smarty/smarty@2.6.28","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3nky-rj9a-dyb7"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-5avg-sw37-g3ff"},{"vulnerability":"VCID-b4d4-pqtp-wbek"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.28"},{"url":"http://public2.vulnerablecode.io/api/packages/224851?format=json","purl":"pkg:composer/smarty/smarty@2.6.29","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3nky-rj9a-dyb7"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-5avg-sw37-g3ff"},{"vulnerability":"VCID-b4d4-pqtp-wbek"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.29"},{"url":"http://public2.vulnerablecode.io/api/packages/224852?format=json","purl":"pkg:composer/smarty/smarty@2.6.30","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3nky-rj9a-dyb7"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-5avg-sw37-g3ff"},{"vulnerability":"VCID-b4d4-pqtp-wbek"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.30"},{"url":"http://public2.vulnerablecode.io/api/packages/224853?format=json","purl":"pkg:composer/smarty/smarty@2.6.31","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3nky-rj9a-dyb7"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-5avg-sw37-g3ff"},{"vulnerability":"VCID-b4d4-pqtp-wbek"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@2.6.31"},{"url":"http://public2.vulnerablecode.io/api/packages/200029?format=json","purl":"pkg:composer/smarty/smarty@3.1.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3nky-rj9a-dyb7"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.11"},{"url":"http://public2.vulnerablecode.io/api/packages/155476?format=json","purl":"pkg:composer/smarty/smarty@3.1.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.12"},{"url":"http://public2.vulnerablecode.io/api/packages/200030?format=json","purl":"pkg:composer/smarty/smarty@3.1.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.13"},{"url":"http://public2.vulnerablecode.io/api/packages/200031?format=json","purl":"pkg:composer/smarty/smarty@3.1.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.14"},{"url":"http://public2.vulnerablecode.io/api/packages/200032?format=json","purl":"pkg:composer/smarty/smarty@3.1.15","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.15"},{"url":"http://public2.vulnerablecode.io/api/packages/200033?format=json","purl":"pkg:composer/smarty/smarty@3.1.16","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.16"},{"url":"http://public2.vulnerablecode.io/api/packages/200034?format=json","purl":"pkg:composer/smarty/smarty@3.1.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.17"},{"url":"http://public2.vulnerablecode.io/api/packages/200035?format=json","purl":"pkg:composer/smarty/smarty@3.1.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.18"},{"url":"http://public2.vulnerablecode.io/api/packages/200036?format=json","purl":"pkg:composer/smarty/smarty@3.1.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.19"},{"url":"http://public2.vulnerablecode.io/api/packages/200037?format=json","purl":"pkg:composer/smarty/smarty@3.1.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.20"},{"url":"http://public2.vulnerablecode.io/api/packages/52026?format=json","purl":"pkg:composer/smarty/smarty@3.1.21","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.21"},{"url":"http://public2.vulnerablecode.io/api/packages/215081?format=json","purl":"pkg:composer/smarty/smarty@3.1.23","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.23"},{"url":"http://public2.vulnerablecode.io/api/packages/215082?format=json","purl":"pkg:composer/smarty/smarty@3.1.24","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.24"},{"url":"http://public2.vulnerablecode.io/api/packages/215083?format=json","purl":"pkg:composer/smarty/smarty@3.1.25","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.25"},{"url":"http://public2.vulnerablecode.io/api/packages/215084?format=json","purl":"pkg:composer/smarty/smarty@3.1.26","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.26"},{"url":"http://public2.vulnerablecode.io/api/packages/215085?format=json","purl":"pkg:composer/smarty/smarty@3.1.27","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.27"},{"url":"http://public2.vulnerablecode.io/api/packages/215086?format=json","purl":"pkg:composer/smarty/smarty@3.1.28","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.28"},{"url":"http://public2.vulnerablecode.io/api/packages/215087?format=json","purl":"pkg:composer/smarty/smarty@3.1.29","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.29"},{"url":"http://public2.vulnerablecode.io/api/packages/215088?format=json","purl":"pkg:composer/smarty/smarty@3.1.30","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.30"},{"url":"http://public2.vulnerablecode.io/api/packages/215089?format=json","purl":"pkg:composer/smarty/smarty@3.1.31","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.31"},{"url":"http://public2.vulnerablecode.io/api/packages/54799?format=json","purl":"pkg:composer/smarty/smarty@3.1.32","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-qnee-xruu-sfb1"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/smarty/smarty@3.1.32"},{"url":"http://public2.vulnerablecode.io/api/packages/281209?format=json","purl":"pkg:deb/debian/smarty3@3.0~rc1-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2zrw-yeaj-1uas"},{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3nky-rj9a-dyb7"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4amz-egp8-f7dx"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-5avg-sw37-g3ff"},{"vulnerability":"VCID-9mh2-hv61-6khw"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-dm8f-mnup-1udw"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-t8ym-xckw-vffz"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-w8cn-5dw9-kkg8"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"},{"vulnerability":"VCID-zqm9-y52a-j3bp"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.0~rc1-1"},{"url":"http://public2.vulnerablecode.io/api/packages/281211?format=json","purl":"pkg:deb/debian/smarty3@3.1.10-2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4amz-egp8-f7dx"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-rr48-d56n-hugj"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.10-2"},{"url":"http://public2.vulnerablecode.io/api/packages/281213?format=json","purl":"pkg:deb/debian/smarty3@3.1.21-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4amz-egp8-f7dx"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.21-1"},{"url":"http://public2.vulnerablecode.io/api/packages/281215?format=json","purl":"pkg:deb/debian/smarty3@3.1.21-1%2Bdeb8u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.21-1%252Bdeb8u2"},{"url":"http://public2.vulnerablecode.io/api/packages/515903?format=json","purl":"pkg:deb/debian/smarty3@3.1.31%2B20161214.1.c7d42e4%2Bselfpack1-2%2Bdeb9u1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3829-yarc-yqh3"},{"vulnerability":"VCID-3xs3-13we-6ffu"},{"vulnerability":"VCID-4dmb-dnk6-6qdd"},{"vulnerability":"VCID-a3yk-8fmf-x7fw"},{"vulnerability":"VCID-d7cx-7mkv-3qhe"},{"vulnerability":"VCID-h2k4-cqfq-sbhw"},{"vulnerability":"VCID-jhg5-tdyz-uyh4"},{"vulnerability":"VCID-mmfc-us8q-xbha"},{"vulnerability":"VCID-vnb9-5w8q-r3bd"},{"vulnerability":"VCID-xmrr-2jyf-5yhj"},{"vulnerability":"VCID-zgxx-cfyu-1ffy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/smarty3@3.1.31%252B20161214.1.c7d42e4%252Bselfpack1-2%252Bdeb9u1"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2018-13982","reference_id":"","reference_type":"","scores":[{"value":"0.02331","scoring_system":"epss","scoring_elements":"0.85129","published_at":"2026-06-04T12:55:00Z"},{"value":"0.02331","scoring_system":"epss","scoring_elements":"0.85158","published_at":"2026-06-06T12:55:00Z"},{"value":"0.02331","scoring_system":"epss","scoring_elements":"0.85153","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2018-13982"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13982","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13982"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/smarty/smarty/CVE-2018-13982.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/smarty/smarty/CVE-2018-13982.yaml"},{"reference_url":"https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180420-01_Smarty_Path_Traversal","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180420-01_Smarty_Path_Traversal"},{"reference_url":"https://github.com/smarty-php/smarty","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/smarty-php/smarty"},{"reference_url":"https://github.com/smarty-php/smarty/commit/2e081a51b1effddb23f87952959139ac62654d50","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/smarty-php/smarty/commit/2e081a51b1effddb23f87952959139ac62654d50"},{"reference_url":"https://github.com/smarty-php/smarty/commit/8d21f38dc35c4cd6b31c2f23fc9b8e5adbc56dfe","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/smarty-php/smarty/commit/8d21f38dc35c4cd6b31c2f23fc9b8e5adbc56dfe"},{"reference_url":"https://github.com/smarty-php/smarty/commit/bcedfd6b58bed4a7366336979ebaa5a240581531","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/smarty-php/smarty/commit/bcedfd6b58bed4a7366336979ebaa5a240581531"},{"reference_url":"https://github.com/smarty-php/smarty/commit/c9dbe1d08c081912d02bd851d1d1b6388f6133d1","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/smarty-php/smarty/commit/c9dbe1d08c081912d02bd851d1d1b6388f6133d1"},{"reference_url":"https://github.com/smarty-php/smarty/commit/f9ca3c63d1250bb56b2bda609dcc9dd81f0065f8","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/smarty-php/smarty/commit/f9ca3c63d1250bb56b2bda609dcc9dd81f0065f8"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/10/msg00015.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2021/10/msg00015.html"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13982","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13982"},{"reference_url":"https://github.com/advisories/GHSA-7gfx-wxfh-7rvm","reference_id":"GHSA-7gfx-wxfh-7rvm","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-7gfx-wxfh-7rvm"},{"reference_url":"https://usn.ubuntu.com/5348-1/","reference_id":"USN-5348-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/5348-1/"}],"weaknesses":[{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":22,"name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."}],"exploits":[],"severity_range_score":"7.0 - 8.9","exploitability":"0.5","weighted_severity":"8.0","risk_score":4.0,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-d7cx-7mkv-3qhe"}