Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/44894?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44894?format=api", "vulnerability_id": "VCID-tenn-ezny-vbgx", "summary": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n.NET DLL Hijacking Remote Code Execution Vulnerability", "aliases": [ { "alias": "CVE-2023-28260" }, { "alias": "GHSA-w4m3-43gp-x8hx" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/500219?format=api", "purl": "pkg:apk/alpine/dotnet6-build@6.0.116-r0?arch=aarch64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-build@6.0.116-r0%3Farch=aarch64&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/500220?format=api", "purl": "pkg:apk/alpine/dotnet6-build@6.0.116-r0?arch=armhf&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-build@6.0.116-r0%3Farch=armhf&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/500221?format=api", "purl": "pkg:apk/alpine/dotnet6-build@6.0.116-r0?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-build@6.0.116-r0%3Farch=armv7&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/500222?format=api", "purl": "pkg:apk/alpine/dotnet6-build@6.0.116-r0?arch=ppc64le&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-build@6.0.116-r0%3Farch=ppc64le&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/500223?format=api", "purl": "pkg:apk/alpine/dotnet6-build@6.0.116-r0?arch=s390x&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-build@6.0.116-r0%3Farch=s390x&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/500225?format=api", "purl": "pkg:apk/alpine/dotnet6-build@6.0.116-r0?arch=x86_64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-build@6.0.116-r0%3Farch=x86_64&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/500224?format=api", "purl": "pkg:apk/alpine/dotnet6-build@6.0.116-r0?arch=x86&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-build@6.0.116-r0%3Farch=x86&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/439130?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=aarch64&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=aarch64&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/448746?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=aarch64&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=aarch64&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/439131?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=armhf&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=armhf&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/448747?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=armhf&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=armhf&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/439132?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=armv7&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=armv7&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/448748?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=armv7&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=armv7&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/439133?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=ppc64le&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=ppc64le&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/448749?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=ppc64le&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=ppc64le&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/448750?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=riscv64&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=riscv64&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/439134?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=s390x&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=s390x&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/448751?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=s390x&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=s390x&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/439136?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=x86_64&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=x86_64&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/448753?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=x86_64&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=x86_64&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/439135?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=x86&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=x86&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/448752?format=api", "purl": "pkg:apk/alpine/dotnet6-runtime@6.0.16-r0?arch=x86&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet6-runtime@6.0.16-r0%3Farch=x86&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/380331?format=api", "purl": "pkg:apk/alpine/dotnet7-build@7.0.105-r0?arch=aarch64&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.105-r0%3Farch=aarch64&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/380332?format=api", "purl": "pkg:apk/alpine/dotnet7-build@7.0.105-r0?arch=armhf&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.105-r0%3Farch=armhf&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/380333?format=api", "purl": "pkg:apk/alpine/dotnet7-build@7.0.105-r0?arch=armv7&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.105-r0%3Farch=armv7&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/380334?format=api", "purl": "pkg:apk/alpine/dotnet7-build@7.0.105-r0?arch=ppc64le&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.105-r0%3Farch=ppc64le&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/380335?format=api", "purl": "pkg:apk/alpine/dotnet7-build@7.0.105-r0?arch=s390x&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.105-r0%3Farch=s390x&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/380337?format=api", "purl": "pkg:apk/alpine/dotnet7-build@7.0.105-r0?arch=x86_64&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.105-r0%3Farch=x86_64&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/380336?format=api", "purl": "pkg:apk/alpine/dotnet7-build@7.0.105-r0?arch=x86&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.105-r0%3Farch=x86&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/134519?format=api", "purl": "pkg:nuget/Microsoft.NetCore.App.Runtime.win-arm@6.0.16", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NetCore.App.Runtime.win-arm@6.0.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/134518?format=api", "purl": "pkg:nuget/Microsoft.NetCore.App.Runtime.win-arm@7.0.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NetCore.App.Runtime.win-arm@7.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/64581?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm@6.0.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm@6.0.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/64582?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm@7.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-rj2a-dp32-uue2" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm@7.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/134521?format=api", "purl": "pkg:nuget/Microsoft.NetCore.App.Runtime.win-arm64@6.0.16", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NetCore.App.Runtime.win-arm64@6.0.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/134520?format=api", "purl": "pkg:nuget/Microsoft.NetCore.App.Runtime.win-arm64@7.0.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NetCore.App.Runtime.win-arm64@7.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/64585?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm64@6.0.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm64@6.0.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/64586?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm64@7.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-rj2a-dp32-uue2" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm64@7.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/134524?format=api", "purl": "pkg:nuget/Microsoft.NetCore.App.Runtime.win-x64@6.0.16", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NetCore.App.Runtime.win-x64@6.0.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/134525?format=api", "purl": "pkg:nuget/Microsoft.NetCore.App.Runtime.win-x64@7.0.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NetCore.App.Runtime.win-x64@7.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/64571?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/64572?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-rj2a-dp32-uue2" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/134523?format=api", "purl": "pkg:nuget/Microsoft.NetCore.App.Runtime.win-x86@6.0.16", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NetCore.App.Runtime.win-x86@6.0.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/134522?format=api", "purl": "pkg:nuget/Microsoft.NetCore.App.Runtime.win-x86@7.0.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NetCore.App.Runtime.win-x86@7.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/64567?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86@6.0.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86@6.0.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/64568?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86@7.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-rj2a-dp32-uue2" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86@7.0.5" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63926?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm@6.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3due-5p8e-3ydc" }, { "vulnerability": "VCID-5g81-47aw-cufw" }, { "vulnerability": "VCID-5sh9-fnvm-ayg1" }, { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-ecyh-dn6h-x3d4" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-tenn-ezny-vbgx" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm@6.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/64579?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm@6.0.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-tenn-ezny-vbgx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm@6.0.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/63928?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm@7.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5sh9-fnvm-ayg1" }, { "vulnerability": "VCID-6yt3-svsa-wugc" }, { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-8n3f-nwe2-tfh5" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-rj2a-dp32-uue2" }, { "vulnerability": "VCID-tenn-ezny-vbgx" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm@7.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/64580?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm@7.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-tenn-ezny-vbgx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm@7.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/63936?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm64@6.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gre-q1a7-xfcg" }, { "vulnerability": "VCID-3due-5p8e-3ydc" }, { "vulnerability": "VCID-5g81-47aw-cufw" }, { "vulnerability": "VCID-5sh9-fnvm-ayg1" }, { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-86wp-azf7-7bh7" }, { "vulnerability": "VCID-ecyh-dn6h-x3d4" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-gz8g-27y9-9ya8" }, { "vulnerability": "VCID-mrk2-zn7p-5bdq" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-tenn-ezny-vbgx" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm64@6.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/64583?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm64@6.0.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-tenn-ezny-vbgx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm64@6.0.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/63938?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm64@7.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gre-q1a7-xfcg" }, { "vulnerability": "VCID-5sh9-fnvm-ayg1" }, { "vulnerability": "VCID-6yt3-svsa-wugc" }, { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-86wp-azf7-7bh7" }, { "vulnerability": "VCID-8n3f-nwe2-tfh5" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-gz8g-27y9-9ya8" }, { "vulnerability": "VCID-mrk2-zn7p-5bdq" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-rj2a-dp32-uue2" }, { "vulnerability": "VCID-tenn-ezny-vbgx" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm64@7.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/64584?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm64@7.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-tenn-ezny-vbgx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm64@7.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/63944?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gre-q1a7-xfcg" }, { "vulnerability": "VCID-3due-5p8e-3ydc" }, { "vulnerability": "VCID-5g81-47aw-cufw" }, { "vulnerability": "VCID-5sh9-fnvm-ayg1" }, { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-86wp-azf7-7bh7" }, { "vulnerability": "VCID-ecyh-dn6h-x3d4" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-gz8g-27y9-9ya8" }, { "vulnerability": "VCID-mrk2-zn7p-5bdq" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-tenn-ezny-vbgx" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/64569?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-tenn-ezny-vbgx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@6.0.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/63946?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gre-q1a7-xfcg" }, { "vulnerability": "VCID-5sh9-fnvm-ayg1" }, { "vulnerability": "VCID-6yt3-svsa-wugc" }, { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-86wp-azf7-7bh7" }, { "vulnerability": "VCID-8n3f-nwe2-tfh5" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-gz8g-27y9-9ya8" }, { "vulnerability": "VCID-mrk2-zn7p-5bdq" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-rj2a-dp32-uue2" }, { "vulnerability": "VCID-tenn-ezny-vbgx" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/64570?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-tenn-ezny-vbgx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64@7.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/63950?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86@6.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gre-q1a7-xfcg" }, { "vulnerability": "VCID-3due-5p8e-3ydc" }, { "vulnerability": "VCID-5g81-47aw-cufw" }, { "vulnerability": "VCID-5sh9-fnvm-ayg1" }, { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-86wp-azf7-7bh7" }, { "vulnerability": "VCID-djes-a1mg-zucg" }, { "vulnerability": "VCID-ecyh-dn6h-x3d4" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-gz8g-27y9-9ya8" }, { "vulnerability": "VCID-mrk2-zn7p-5bdq" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-tenn-ezny-vbgx" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86@6.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/64565?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86@6.0.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-tenn-ezny-vbgx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86@6.0.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/63952?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86@7.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gre-q1a7-xfcg" }, { "vulnerability": "VCID-5sh9-fnvm-ayg1" }, { "vulnerability": "VCID-6yt3-svsa-wugc" }, { "vulnerability": "VCID-7pxy-azw1-3uef" }, { "vulnerability": "VCID-86wp-azf7-7bh7" }, { "vulnerability": "VCID-8n3f-nwe2-tfh5" }, { "vulnerability": "VCID-f13u-e8kq-cffh" }, { "vulnerability": "VCID-gz8g-27y9-9ya8" }, { "vulnerability": "VCID-mrk2-zn7p-5bdq" }, { "vulnerability": "VCID-qkfu-3ybz-qucf" }, { "vulnerability": "VCID-rj2a-dp32-uue2" }, { "vulnerability": "VCID-tenn-ezny-vbgx" }, { "vulnerability": "VCID-ywk1-5mgc-zygk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86@7.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/64566?format=api", "purl": "pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86@7.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-tenn-ezny-vbgx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86@7.0.4" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28260.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28260.json" }, { "reference_url": "https://github.com/dotnet/runtime", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/runtime" }, { "reference_url": "https://www.cve.org/CVERecord?id=CVE-2023-28260", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.cve.org/CVERecord?id=CVE-2023-28260" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2185016", "reference_id": "2185016", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2185016" }, { "reference_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28260", "reference_id": "CVE-2023-28260", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28260" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28260", "reference_id": "CVE-2023-28260", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28260" }, { "reference_url": "https://github.com/advisories/GHSA-w4m3-43gp-x8hx", "reference_id": "GHSA-w4m3-43gp-x8hx", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-w4m3-43gp-x8hx" }, { "reference_url": "https://github.com/dotnet/runtime/security/advisories/GHSA-w4m3-43gp-x8hx", "reference_id": "GHSA-w4m3-43gp-x8hx", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-w4m3-43gp-x8hx" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 78, "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "description": "The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 491, "name": "Public cloneable() Method Without Final ('Object Hijack')", "description": "A class has a cloneable() method that is not declared final, which allows an object to be created without calling the constructor. This can cause the object to be in an unexpected state." } ], "exploits": [], "severity_range_score": "7.0 - 8.9", "exploitability": "0.5", "weighted_severity": "8.0", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tenn-ezny-vbgx" }