{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/98783?format=json","vulnerability_id":"VCID-b5ns-wtb6-fkha","summary":"Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet runs. This could allow unauthorized code to be loaded. This bug was first introduced in Puppet Agent 1.3.0.","aliases":[{"alias":"CVE-2016-5713"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/124335?format=json","purl":"pkg:deb/debian/puppet@4.7.0-1?distro=bullseye","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@4.7.0-1%3Fdistro=bullseye"},{"url":"http://public2.vulnerablecode.io/api/packages/518469?format=json","purl":"pkg:deb/debian/puppet@4.8.2-5~bpo8%2B1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-mn3q-6cs1-ukcq"},{"vulnerability":"VCID-wqeh-3r7d-7ffz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@4.8.2-5~bpo8%252B1"},{"url":"http://public2.vulnerablecode.io/api/packages/124315?format=json","purl":"pkg:deb/debian/puppet@5.5.22-2?distro=bullseye","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@5.5.22-2%3Fdistro=bullseye"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/228785?format=json","purl":"pkg:deb/debian/puppet@0.20.1-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1n9j-3ymz-dub5"},{"vulnerability":"VCID-38dv-ps67-r7f7"},{"vulnerability":"VCID-3xtf-acbg-nqhe"},{"vulnerability":"VCID-6816-tprb-zqgt"},{"vulnerability":"VCID-7gsz-qxb2-mbe7"},{"vulnerability":"VCID-7wuf-dtva-x7ej"},{"vulnerability":"VCID-86jb-mnzj-e3cy"},{"vulnerability":"VCID-982t-up4e-t7eg"},{"vulnerability":"VCID-9t7v-tnzt-cqa6"},{"vulnerability":"VCID-b5ns-wtb6-fkha"},{"vulnerability":"VCID-c6dw-92d3-n7c5"},{"vulnerability":"VCID-df8e-jf8b-puec"},{"vulnerability":"VCID-djqs-7e92-wbb7"},{"vulnerability":"VCID-ear8-9pcm-zqfz"},{"vulnerability":"VCID-ej47-hdx8-pbhp"},{"vulnerability":"VCID-fjyu-jwpx-sfe5"},{"vulnerability":"VCID-fwaq-2kzp-2kgc"},{"vulnerability":"VCID-g1nc-3ca8-xkes"},{"vulnerability":"VCID-g5ek-ebw1-ebhf"},{"vulnerability":"VCID-gfnp-y7y2-f7fu"},{"vulnerability":"VCID-jj8h-wz8z-xfbq"},{"vulnerability":"VCID-jrdk-dzhe-z7ff"},{"vulnerability":"VCID-jwz8-kbu1-f3d7"},{"vulnerability":"VCID-khb1-phav-ukf8"},{"vulnerability":"VCID-mn3q-6cs1-ukcq"},{"vulnerability":"VCID-mntc-3nm2-xybw"},{"vulnerability":"VCID-msp5-ahmq-hbc3"},{"vulnerability":"VCID-nrht-tzzq-eqhs"},{"vulnerability":"VCID-qhz5-1muw-dqgn"},{"vulnerability":"VCID-ta3j-j5s5-hfba"},{"vulnerability":"VCID-thv1-66q2-uuc9"},{"vulnerability":"VCID-vxdt-q1t7-27hh"},{"vulnerability":"VCID-wmv1-2hjk-8ycf"},{"vulnerability":"VCID-wpqq-eg3b-3kcc"},{"vulnerability":"VCID-wqeh-3r7d-7ffz"},{"vulnerability":"VCID-wqm7-m41f-pqfm"},{"vulnerability":"VCID-xhmp-nrhy-zfcn"},{"vulnerability":"VCID-xxht-cd83-7qb9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@0.20.1-1"},{"url":"http://public2.vulnerablecode.io/api/packages/228786?format=json","purl":"pkg:deb/debian/puppet@0.24.5-3%2Blenny2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1n9j-3ymz-dub5"},{"vulnerability":"VCID-38dv-ps67-r7f7"},{"vulnerability":"VCID-3xtf-acbg-nqhe"},{"vulnerability":"VCID-6816-tprb-zqgt"},{"vulnerability":"VCID-7gsz-qxb2-mbe7"},{"vulnerability":"VCID-7wuf-dtva-x7ej"},{"vulnerability":"VCID-86jb-mnzj-e3cy"},{"vulnerability":"VCID-982t-up4e-t7eg"},{"vulnerability":"VCID-9t7v-tnzt-cqa6"},{"vulnerability":"VCID-b5ns-wtb6-fkha"},{"vulnerability":"VCID-c6dw-92d3-n7c5"},{"vulnerability":"VCID-df8e-jf8b-puec"},{"vulnerability":"VCID-djqs-7e92-wbb7"},{"vulnerability":"VCID-ear8-9pcm-zqfz"},{"vulnerability":"VCID-ej47-hdx8-pbhp"},{"vulnerability":"VCID-fjyu-jwpx-sfe5"},{"vulnerability":"VCID-fwaq-2kzp-2kgc"},{"vulnerability":"VCID-g1nc-3ca8-xkes"},{"vulnerability":"VCID-g5ek-ebw1-ebhf"},{"vulnerability":"VCID-gfnp-y7y2-f7fu"},{"vulnerability":"VCID-jj8h-wz8z-xfbq"},{"vulnerability":"VCID-jrdk-dzhe-z7ff"},{"vulnerability":"VCID-jwz8-kbu1-f3d7"},{"vulnerability":"VCID-khb1-phav-ukf8"},{"vulnerability":"VCID-mn3q-6cs1-ukcq"},{"vulnerability":"VCID-mntc-3nm2-xybw"},{"vulnerability":"VCID-msp5-ahmq-hbc3"},{"vulnerability":"VCID-nrht-tzzq-eqhs"},{"vulnerability":"VCID-qhz5-1muw-dqgn"},{"vulnerability":"VCID-ta3j-j5s5-hfba"},{"vulnerability":"VCID-thv1-66q2-uuc9"},{"vulnerability":"VCID-vxdt-q1t7-27hh"},{"vulnerability":"VCID-wmv1-2hjk-8ycf"},{"vulnerability":"VCID-wpqq-eg3b-3kcc"},{"vulnerability":"VCID-wqeh-3r7d-7ffz"},{"vulnerability":"VCID-wqm7-m41f-pqfm"},{"vulnerability":"VCID-xhmp-nrhy-zfcn"},{"vulnerability":"VCID-xxht-cd83-7qb9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@0.24.5-3%252Blenny2"},{"url":"http://public2.vulnerablecode.io/api/packages/228787?format=json","purl":"pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1n9j-3ymz-dub5"},{"vulnerability":"VCID-38dv-ps67-r7f7"},{"vulnerability":"VCID-3xtf-acbg-nqhe"},{"vulnerability":"VCID-6816-tprb-zqgt"},{"vulnerability":"VCID-7gsz-qxb2-mbe7"},{"vulnerability":"VCID-7wuf-dtva-x7ej"},{"vulnerability":"VCID-86jb-mnzj-e3cy"},{"vulnerability":"VCID-9t7v-tnzt-cqa6"},{"vulnerability":"VCID-b5ns-wtb6-fkha"},{"vulnerability":"VCID-c6dw-92d3-n7c5"},{"vulnerability":"VCID-df8e-jf8b-puec"},{"vulnerability":"VCID-djqs-7e92-wbb7"},{"vulnerability":"VCID-ear8-9pcm-zqfz"},{"vulnerability":"VCID-ej47-hdx8-pbhp"},{"vulnerability":"VCID-fjyu-jwpx-sfe5"},{"vulnerability":"VCID-fwaq-2kzp-2kgc"},{"vulnerability":"VCID-g1nc-3ca8-xkes"},{"vulnerability":"VCID-g5ek-ebw1-ebhf"},{"vulnerability":"VCID-gfnp-y7y2-f7fu"},{"vulnerability":"VCID-jj8h-wz8z-xfbq"},{"vulnerability":"VCID-jrdk-dzhe-z7ff"},{"vulnerability":"VCID-jwz8-kbu1-f3d7"},{"vulnerability":"VCID-khb1-phav-ukf8"},{"vulnerability":"VCID-mn3q-6cs1-ukcq"},{"vulnerability":"VCID-mntc-3nm2-xybw"},{"vulnerability":"VCID-nrht-tzzq-eqhs"},{"vulnerability":"VCID-qhz5-1muw-dqgn"},{"vulnerability":"VCID-ta3j-j5s5-hfba"},{"vulnerability":"VCID-thv1-66q2-uuc9"},{"vulnerability":"VCID-vxdt-q1t7-27hh"},{"vulnerability":"VCID-wmv1-2hjk-8ycf"},{"vulnerability":"VCID-wqeh-3r7d-7ffz"},{"vulnerability":"VCID-wqm7-m41f-pqfm"},{"vulnerability":"VCID-xhmp-nrhy-zfcn"},{"vulnerability":"VCID-xxht-cd83-7qb9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.6.2-5%252Bsqueeze9"},{"url":"http://public2.vulnerablecode.io/api/packages/228788?format=json","purl":"pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1n9j-3ymz-dub5"},{"vulnerability":"VCID-38dv-ps67-r7f7"},{"vulnerability":"VCID-3xtf-acbg-nqhe"},{"vulnerability":"VCID-6816-tprb-zqgt"},{"vulnerability":"VCID-7gsz-qxb2-mbe7"},{"vulnerability":"VCID-7wuf-dtva-x7ej"},{"vulnerability":"VCID-86jb-mnzj-e3cy"},{"vulnerability":"VCID-9t7v-tnzt-cqa6"},{"vulnerability":"VCID-b5ns-wtb6-fkha"},{"vulnerability":"VCID-c6dw-92d3-n7c5"},{"vulnerability":"VCID-df8e-jf8b-puec"},{"vulnerability":"VCID-djqs-7e92-wbb7"},{"vulnerability":"VCID-ear8-9pcm-zqfz"},{"vulnerability":"VCID-ej47-hdx8-pbhp"},{"vulnerability":"VCID-fjyu-jwpx-sfe5"},{"vulnerability":"VCID-fwaq-2kzp-2kgc"},{"vulnerability":"VCID-g1nc-3ca8-xkes"},{"vulnerability":"VCID-g5ek-ebw1-ebhf"},{"vulnerability":"VCID-gfnp-y7y2-f7fu"},{"vulnerability":"VCID-jj8h-wz8z-xfbq"},{"vulnerability":"VCID-jrdk-dzhe-z7ff"},{"vulnerability":"VCID-jwz8-kbu1-f3d7"},{"vulnerability":"VCID-khb1-phav-ukf8"},{"vulnerability":"VCID-mn3q-6cs1-ukcq"},{"vulnerability":"VCID-mntc-3nm2-xybw"},{"vulnerability":"VCID-nrht-tzzq-eqhs"},{"vulnerability":"VCID-qhz5-1muw-dqgn"},{"vulnerability":"VCID-ta3j-j5s5-hfba"},{"vulnerability":"VCID-thv1-66q2-uuc9"},{"vulnerability":"VCID-vxdt-q1t7-27hh"},{"vulnerability":"VCID-wmv1-2hjk-8ycf"},{"vulnerability":"VCID-wqeh-3r7d-7ffz"},{"vulnerability":"VCID-wqm7-m41f-pqfm"},{"vulnerability":"VCID-xhmp-nrhy-zfcn"},{"vulnerability":"VCID-xxht-cd83-7qb9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.6.2-5%252Bsqueeze10"},{"url":"http://public2.vulnerablecode.io/api/packages/228789?format=json","purl":"pkg:deb/debian/puppet@2.7.23-1~deb7u3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1n9j-3ymz-dub5"},{"vulnerability":"VCID-38dv-ps67-r7f7"},{"vulnerability":"VCID-3xtf-acbg-nqhe"},{"vulnerability":"VCID-86jb-mnzj-e3cy"},{"vulnerability":"VCID-b5ns-wtb6-fkha"},{"vulnerability":"VCID-jj8h-wz8z-xfbq"},{"vulnerability":"VCID-mn3q-6cs1-ukcq"},{"vulnerability":"VCID-nrht-tzzq-eqhs"},{"vulnerability":"VCID-wqeh-3r7d-7ffz"},{"vulnerability":"VCID-wqm7-m41f-pqfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.7.23-1~deb7u3"},{"url":"http://public2.vulnerablecode.io/api/packages/282378?format=json","purl":"pkg:deb/debian/puppet@3.7.2-4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-b5ns-wtb6-fkha"},{"vulnerability":"VCID-jj8h-wz8z-xfbq"},{"vulnerability":"VCID-mn3q-6cs1-ukcq"},{"vulnerability":"VCID-wqeh-3r7d-7ffz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@3.7.2-4"},{"url":"http://public2.vulnerablecode.io/api/packages/282379?format=json","purl":"pkg:deb/debian/puppet@3.7.2-4%2Bdeb8u1~bpo70%2B1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-b5ns-wtb6-fkha"},{"vulnerability":"VCID-jj8h-wz8z-xfbq"},{"vulnerability":"VCID-mn3q-6cs1-ukcq"},{"vulnerability":"VCID-wqeh-3r7d-7ffz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@3.7.2-4%252Bdeb8u1~bpo70%252B1"},{"url":"http://public2.vulnerablecode.io/api/packages/282380?format=json","purl":"pkg:deb/debian/puppet@3.7.2-4%2Bdeb8u1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-b5ns-wtb6-fkha"},{"vulnerability":"VCID-jj8h-wz8z-xfbq"},{"vulnerability":"VCID-mn3q-6cs1-ukcq"},{"vulnerability":"VCID-wqeh-3r7d-7ffz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@3.7.2-4%252Bdeb8u1"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-5713","reference_id":"","reference_type":"","scores":[{"value":"0.0112","scoring_system":"epss","scoring_elements":"0.78579","published_at":"2026-06-04T12:55:00Z"},{"value":"0.0112","scoring_system":"epss","scoring_elements":"0.78606","published_at":"2026-06-05T12:55:00Z"},{"value":"0.0112","scoring_system":"epss","scoring_elements":"0.78614","published_at":"2026-06-06T12:55:00Z"},{"value":"0.0112","scoring_system":"epss","scoring_elements":"0.78605","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-5713"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5713","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5713"}],"weaknesses":[],"exploits":[],"severity_range_score":null,"exploitability":"0.5","weighted_severity":"0.0","risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-b5ns-wtb6-fkha"}