Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-86kf-sbbm-kqg6

Summary

OpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.

Aliases

alias	CVE-2024-28718

alias	GHSA-jx7x-9r98-h5xr

Fixed_packages

url	pkg:pypi/magnum@14.1.2
purl	pkg:pypi/magnum@14.1.2
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@14.1.2

url	pkg:pypi/magnum@15.0.2
purl	pkg:pypi/magnum@15.0.2
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@15.0.2

url	pkg:pypi/magnum@16.0.2
purl	pkg:pypi/magnum@16.0.2
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@16.0.2

url	pkg:pypi/magnum@17.0.2
purl	pkg:pypi/magnum@17.0.2
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@17.0.2

Affected_packages

url pkg:pypi/magnum@5.0.2

purl pkg:pypi/magnum@5.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@5.0.2

url pkg:pypi/magnum@6.3.0

purl pkg:pypi/magnum@6.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@6.3.0

url pkg:pypi/magnum@7.0.1

purl pkg:pypi/magnum@7.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@7.0.1

url pkg:pypi/magnum@7.0.2

purl pkg:pypi/magnum@7.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@7.0.2

url pkg:pypi/magnum@7.1.0

purl pkg:pypi/magnum@7.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@7.1.0

url pkg:pypi/magnum@7.2.0

purl pkg:pypi/magnum@7.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@7.2.0

url pkg:pypi/magnum@8.0.0.0rc1

purl pkg:pypi/magnum@8.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@8.0.0.0rc1

url pkg:pypi/magnum@8.0.0.0rc2

purl pkg:pypi/magnum@8.0.0.0rc2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@8.0.0.0rc2

url pkg:pypi/magnum@8.0.0

purl pkg:pypi/magnum@8.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@8.0.0

url pkg:pypi/magnum@8.1.0

purl pkg:pypi/magnum@8.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@8.1.0

url pkg:pypi/magnum@8.2.0

purl pkg:pypi/magnum@8.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@8.2.0

url pkg:pypi/magnum@8.2.1

purl pkg:pypi/magnum@8.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@8.2.1

url pkg:pypi/magnum@9.0.0.0rc1

purl pkg:pypi/magnum@9.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@9.0.0.0rc1

url pkg:pypi/magnum@9.0.0.0rc2

purl pkg:pypi/magnum@9.0.0.0rc2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@9.0.0.0rc2

url pkg:pypi/magnum@9.0.0

purl pkg:pypi/magnum@9.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@9.0.0

url pkg:pypi/magnum@9.1.0

purl pkg:pypi/magnum@9.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@9.1.0

url pkg:pypi/magnum@9.2.0

purl pkg:pypi/magnum@9.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@9.2.0

url pkg:pypi/magnum@9.3.0

purl pkg:pypi/magnum@9.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@9.3.0

url pkg:pypi/magnum@9.4.0

purl pkg:pypi/magnum@9.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@9.4.0

url pkg:pypi/magnum@9.4.1

purl pkg:pypi/magnum@9.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@9.4.1

url pkg:pypi/magnum@10.0.0.0rc1

purl pkg:pypi/magnum@10.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@10.0.0.0rc1

url pkg:pypi/magnum@10.0.0.0rc2

purl pkg:pypi/magnum@10.0.0.0rc2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@10.0.0.0rc2

url pkg:pypi/magnum@10.0.0

purl pkg:pypi/magnum@10.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@10.0.0

url pkg:pypi/magnum@10.1.0

purl pkg:pypi/magnum@10.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@10.1.0

url pkg:pypi/magnum@11.0.0.0rc1

purl pkg:pypi/magnum@11.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@11.0.0.0rc1

url pkg:pypi/magnum@11.0.0

purl pkg:pypi/magnum@11.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@11.0.0

url pkg:pypi/magnum@11.1.0

purl pkg:pypi/magnum@11.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@11.1.0

url pkg:pypi/magnum@11.1.1

purl pkg:pypi/magnum@11.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@11.1.1

url pkg:pypi/magnum@11.2.0

purl pkg:pypi/magnum@11.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@11.2.0

url pkg:pypi/magnum@11.2.1

purl pkg:pypi/magnum@11.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@11.2.1

url pkg:pypi/magnum@12.0.0.0rc1

purl pkg:pypi/magnum@12.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@12.0.0.0rc1

url pkg:pypi/magnum@12.0.0.0rc2

purl pkg:pypi/magnum@12.0.0.0rc2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@12.0.0.0rc2

url pkg:pypi/magnum@12.0.0

purl pkg:pypi/magnum@12.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@12.0.0

url pkg:pypi/magnum@12.1.0

purl pkg:pypi/magnum@12.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@12.1.0

url pkg:pypi/magnum@12.1.1

purl pkg:pypi/magnum@12.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@12.1.1

url pkg:pypi/magnum@13.0.0.0rc1

purl pkg:pypi/magnum@13.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@13.0.0.0rc1

url pkg:pypi/magnum@13.0.0

purl pkg:pypi/magnum@13.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@13.0.0

url pkg:pypi/magnum@13.1.0

purl pkg:pypi/magnum@13.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@13.1.0

url pkg:pypi/magnum@13.1.1

purl pkg:pypi/magnum@13.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@13.1.1

url pkg:pypi/magnum@14.0.0.0rc1

purl pkg:pypi/magnum@14.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@14.0.0.0rc1

url pkg:pypi/magnum@14.0.0.0rc2

purl pkg:pypi/magnum@14.0.0.0rc2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@14.0.0.0rc2

url pkg:pypi/magnum@14.0.0

purl pkg:pypi/magnum@14.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@14.0.0

url pkg:pypi/magnum@14.1.0

purl pkg:pypi/magnum@14.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@14.1.0

url pkg:pypi/magnum@14.1.1

purl pkg:pypi/magnum@14.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@14.1.1

url pkg:pypi/magnum@15.0.0.0rc1

purl pkg:pypi/magnum@15.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@15.0.0.0rc1

url pkg:pypi/magnum@15.0.0.0rc2

purl pkg:pypi/magnum@15.0.0.0rc2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@15.0.0.0rc2

url pkg:pypi/magnum@15.0.0

purl pkg:pypi/magnum@15.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@15.0.0

url pkg:pypi/magnum@15.0.1

purl pkg:pypi/magnum@15.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@15.0.1

url pkg:pypi/magnum@16.0.0.0rc1

purl pkg:pypi/magnum@16.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@16.0.0.0rc1

url pkg:pypi/magnum@16.0.0

purl pkg:pypi/magnum@16.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@16.0.0

url pkg:pypi/magnum@16.0.1

purl pkg:pypi/magnum@16.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@16.0.1

url pkg:pypi/magnum@17.0.0.0rc1

purl pkg:pypi/magnum@17.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@17.0.0.0rc1

url pkg:pypi/magnum@17.0.0

purl pkg:pypi/magnum@17.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@17.0.0

url pkg:pypi/magnum@17.0.1

purl pkg:pypi/magnum@17.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-86kf-sbbm-kqg6

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/magnum@17.0.1

References

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2024-28718

reference_id

reference_type

scores

value	0.01183
scoring_system	epss
scoring_elements	0.79137
published_at	2026-06-05T12:55:00Z

value	0.01183
scoring_system	epss
scoring_elements	0.79139
published_at	2026-06-09T12:55:00Z

value	0.01183
scoring_system	epss
scoring_elements	0.79121
published_at	2026-06-08T12:55:00Z

value	0.01183
scoring_system	epss
scoring_elements	0.79133
published_at	2026-06-07T12:55:00Z

value	0.01183
scoring_system	epss
scoring_elements	0.79142
published_at	2026-06-06T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2024-28718

reference_url

https://bugs.launchpad.net/magnum/+bug/2047690

reference_id

reference_type

scores

value	6.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

value	9.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

value	MODERATE
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-06-18T19:46:19Z/

url

https://bugs.launchpad.net/magnum/+bug/2047690

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	7
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url

https://gist.github.com/Fewword/f098d8d6375ac25e27b18c0e57be532f

reference_id

reference_type

scores

value	6.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

value	9.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

value	MODERATE
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-06-18T19:46:19Z/

url

https://gist.github.com/Fewword/f098d8d6375ac25e27b18c0e57be532f

reference_url

https://github.com/openstack/magnum

reference_id

reference_type

scores

value	6.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/openstack/magnum

reference_url

https://github.com/openstack/magnum/commit/272fd686d8c8bf5954e9e7d3bc991ff27e46184d

reference_id

reference_type

scores

value	6.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/openstack/magnum/commit/272fd686d8c8bf5954e9e7d3bc991ff27e46184d

reference_url

https://github.com/openstack/magnum/commit/312aa6a86ac8e62f6ed4f1e9473fdabbbb7a4b1e

reference_id

reference_type

scores

value	6.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/openstack/magnum/commit/312aa6a86ac8e62f6ed4f1e9473fdabbbb7a4b1e

reference_url

https://github.com/openstack/magnum/commit/883b40b5b0ecfc5f78758143c0d3c754458f12b7

reference_id

reference_type

scores

value	6.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/openstack/magnum/commit/883b40b5b0ecfc5f78758143c0d3c754458f12b7

reference_url

https://github.com/openstack/magnum/commit/e79907c521149872c1b495355a3a7b3a0c7e3479

reference_id

reference_type

scores

value	6.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/openstack/magnum/commit/e79907c521149872c1b495355a3a7b3a0c7e3479

reference_url

https://review.opendev.org/c/openstack/magnum/+/907305

reference_id

reference_type

scores

value	6.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

value	9.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

value	MODERATE
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-06-18T19:46:19Z/

url

https://review.opendev.org/c/openstack/magnum/+/907305

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2024-28718

reference_id

CVE-2024-28718

reference_type

scores

value	6.3
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2024-28718

reference_url

https://github.com/advisories/GHSA-jx7x-9r98-h5xr

reference_id

GHSA-jx7x-9r98-h5xr

reference_type

scores

value	MODERATE
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-jx7x-9r98-h5xr

Weaknesses

cwe_id	367
name	Time-of-check Time-of-use (TOCTOU) Race Condition
description	The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

Exploits

Severity_range_score 4.0 - 9.8

Exploitability 0.5

Weighted_severity 6.9

Risk_score 3.5

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-86kf-sbbm-kqg6

Vulnerability Instance