Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-24uq-dsuk-dffc
Summaryjar: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retrieving the content from the archive, but the fake extension after the null was used to determine the type of content. This could have been used to hide code in a web extension disguised as something else like an image.
Aliases
0
alias CVE-2025-1936
Fixed_packages
Affected_packages
References
0
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-14
reference_id mfsa2025-14
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-14
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-16
reference_id mfsa2025-16
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-16
2
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-17
reference_id mfsa2025-17
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-17
3
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-18
reference_id mfsa2025-18
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-18
Weaknesses
Exploits
Severity_range_score7.0 - 10.0
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-24uq-dsuk-dffc