Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/44580?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44580?format=api", "vulnerability_id": "VCID-sxq3-egvv-1kdc", "summary": "Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions\nSaleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like user email address in staff-authenticated requests.", "aliases": [ { "alias": "CVE-2023-26051" }, { "alias": "GHSA-r8qr-wwg3-2r85" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/64090?format=api", "purl": "pkg:pypi/saleor@3.1.48", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/saleor@3.1.48" }, { "url": "http://public2.vulnerablecode.io/api/packages/64094?format=api", "purl": "pkg:pypi/saleor@3.7.59", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/saleor@3.7.59" }, { "url": "http://public2.vulnerablecode.io/api/packages/64095?format=api", "purl": "pkg:pypi/saleor@3.8.30", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/saleor@3.8.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/64092?format=api", "purl": "pkg:pypi/saleor@3.9.27", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/saleor@3.9.27" }, { "url": "http://public2.vulnerablecode.io/api/packages/64093?format=api", "purl": "pkg:pypi/saleor@3.10.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/saleor@3.10.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/64091?format=api", "purl": "pkg:pypi/saleor@3.11.12", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/saleor@3.11.12" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58554?format=api", "purl": "pkg:pypi/saleor@2.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4zmr-5jbx-z3ha" }, { "vulnerability": "VCID-sxq3-egvv-1kdc" }, { "vulnerability": "VCID-vjgy-vf2e-jyha" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/saleor@2.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/64085?format=api", "purl": "pkg:pypi/saleor@3.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4zmr-5jbx-z3ha" }, { "vulnerability": "VCID-sxq3-egvv-1kdc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/saleor@3.7.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/64086?format=api", "purl": "pkg:pypi/saleor@3.8.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4zmr-5jbx-z3ha" }, { "vulnerability": "VCID-sxq3-egvv-1kdc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/saleor@3.8.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/64087?format=api", "purl": "pkg:pypi/saleor@3.9.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4zmr-5jbx-z3ha" }, { "vulnerability": "VCID-sxq3-egvv-1kdc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/saleor@3.9.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/64088?format=api", "purl": "pkg:pypi/saleor@3.10.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4zmr-5jbx-z3ha" }, { "vulnerability": "VCID-sxq3-egvv-1kdc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/saleor@3.10.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/64089?format=api", "purl": "pkg:pypi/saleor@3.11.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4zmr-5jbx-z3ha" }, { "vulnerability": "VCID-sxq3-egvv-1kdc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/saleor@3.11.0" } ], "references": [ { "reference_url": "https://github.com/saleor/saleor/commit/31bce881ccccf0d79a9b14ecb6ca3138d1edeec1", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saleor/saleor/commit/31bce881ccccf0d79a9b14ecb6ca3138d1edeec1" }, { "reference_url": "https://github.com/saleor/saleor/releases/tag/3.10.14", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saleor/saleor/releases/tag/3.10.14" }, { "reference_url": "https://github.com/saleor/saleor/releases/tag/3.11.12", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saleor/saleor/releases/tag/3.11.12" }, { "reference_url": "https://github.com/saleor/saleor/releases/tag/3.1.48", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saleor/saleor/releases/tag/3.1.48" }, { "reference_url": "https://github.com/saleor/saleor/releases/tag/3.7.59", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saleor/saleor/releases/tag/3.7.59" }, { "reference_url": "https://github.com/saleor/saleor/releases/tag/3.8.30", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saleor/saleor/releases/tag/3.8.30" }, { "reference_url": "https://github.com/saleor/saleor/releases/tag/3.9.27", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saleor/saleor/releases/tag/3.9.27" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-26051", "reference_id": "CVE-2023-26051", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-26051" }, { "reference_url": "https://github.com/advisories/GHSA-r8qr-wwg3-2r85", "reference_id": "GHSA-r8qr-wwg3-2r85", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-r8qr-wwg3-2r85" }, { "reference_url": "https://github.com/saleor/saleor/security/advisories/GHSA-r8qr-wwg3-2r85", "reference_id": "GHSA-r8qr-wwg3-2r85", "reference_type": "", "scores": [], "url": "https://github.com/saleor/saleor/security/advisories/GHSA-r8qr-wwg3-2r85" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": null, "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sxq3-egvv-1kdc" }