Approved changes feed: RSS · Atom

cpe:2.3:a:pylonsproject:colander:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPylonsproject (fc2c5ea4-1e4e-5968-8714-c4ff95e3f409)
ProductColander (94002be8-b876-5a1b-9fd8-f969b596bb25)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python-colander purl2cpe 2026-06-01 10:12:19.368334
pkg:github/pylons/colander purl2cpe 2026-06-01 10:12:19.368338
pkg:pypi/colander purl2cpe 2026-06-01 10:12:19.368340
pkg:rpm/fedora/python-colander purl2cpe 2026-06-01 10:12:19.368343
pkg:rpm/opensuse/python-colander purl2cpe 2026-06-01 10:12:19.368346

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-18361 vulnerable 2026-06-08 05:09:11.067202 Details available
In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis.
Published: 2019-02-01T09:00:00.000Z
Updated: 2024-08-05T21:20:50.872Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.