Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/116013?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/116013?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.13.3-1?distro=trixie", "type": "deb", "namespace": "debian", "name": "mediawiki", "version": "1:1.13.3-1", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "1:1.14.0-1", "latest_non_vulnerable_version": "1:1.43.8+dfsg-2", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/92900?format=api", "vulnerability_id": "VCID-1uhc-vf14-9ugy", "summary": "MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might allow remote attackers to obtain sensitive information via requests for files in images/deleted/.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2008-5687", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00435", "scoring_system": "epss", "scoring_elements": "0.63202", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00435", "scoring_system": "epss", "scoring_elements": "0.63246", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00435", "scoring_system": "epss", "scoring_elements": "0.63254", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00435", "scoring_system": "epss", "scoring_elements": "0.63244", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00435", "scoring_system": "epss", "scoring_elements": "0.63231", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2008-5687" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5687", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5687" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/116013?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.13.3-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.13.3-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115992?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6abq-6jq6-cfhg" }, { "vulnerability": "VCID-7btv-s4q8-muds" }, { "vulnerability": "VCID-cx2g-7k39-9kc6" }, { "vulnerability": "VCID-dnka-4jmd-uudb" }, { "vulnerability": "VCID-qpyg-4cts-z3gz" }, { "vulnerability": "VCID-zv3h-mucp-bkhr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115990?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.39.17-1%2Bdeb12u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cx2g-7k39-9kc6" }, { "vulnerability": "VCID-zv3h-mucp-bkhr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1%252Bdeb12u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115994?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115993?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-2%3Fdistro=trixie" } ], "aliases": [ "CVE-2008-5687" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1uhc-vf14-9ugy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/92901?format=api", "vulnerability_id": "VCID-83gw-3ese-gyg4", "summary": "MediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is enabled, sometimes provides the full installation path in a debugging message, which might allow remote attackers to obtain sensitive information via unspecified requests that trigger an uncaught exception.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2008-5688", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00387", "scoring_system": "epss", "scoring_elements": "0.60168", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00387", "scoring_system": "epss", "scoring_elements": "0.60214", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00387", "scoring_system": "epss", "scoring_elements": "0.60217", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00387", "scoring_system": "epss", "scoring_elements": "0.60204", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00387", "scoring_system": "epss", "scoring_elements": "0.60187", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2008-5688" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5688", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5688" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/116013?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.13.3-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.13.3-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115992?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6abq-6jq6-cfhg" }, { "vulnerability": "VCID-7btv-s4q8-muds" }, { "vulnerability": "VCID-cx2g-7k39-9kc6" }, { "vulnerability": "VCID-dnka-4jmd-uudb" }, { "vulnerability": "VCID-qpyg-4cts-z3gz" }, { "vulnerability": "VCID-zv3h-mucp-bkhr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115990?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.39.17-1%2Bdeb12u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cx2g-7k39-9kc6" }, { "vulnerability": "VCID-zv3h-mucp-bkhr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1%252Bdeb12u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115994?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115993?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-2%3Fdistro=trixie" } ], "aliases": [ "CVE-2008-5688" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-83gw-3ese-gyg4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/92897?format=api", "vulnerability_id": "VCID-bszr-887y-2yg7", "summary": "Cross-site scripting (XSS) vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, when Internet Explorer is used and uploads are enabled, or an SVG scripting browser is used and SVG uploads are enabled, allows remote authenticated users to inject arbitrary web script or HTML by editing a wiki page.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2008-5250", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00354", "scoring_system": "epss", "scoring_elements": "0.58022", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00354", "scoring_system": "epss", "scoring_elements": "0.58073", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00354", "scoring_system": "epss", "scoring_elements": "0.58082", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00354", "scoring_system": "epss", "scoring_elements": "0.58071", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00354", "scoring_system": "epss", "scoring_elements": "0.58057", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2008-5250" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5250", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5250" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508869", "reference_id": "508869", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508869" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/116013?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.13.3-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.13.3-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115992?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6abq-6jq6-cfhg" }, { "vulnerability": "VCID-7btv-s4q8-muds" }, { "vulnerability": "VCID-cx2g-7k39-9kc6" }, { "vulnerability": "VCID-dnka-4jmd-uudb" }, { "vulnerability": "VCID-qpyg-4cts-z3gz" }, { "vulnerability": "VCID-zv3h-mucp-bkhr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115990?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.39.17-1%2Bdeb12u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cx2g-7k39-9kc6" }, { "vulnerability": "VCID-zv3h-mucp-bkhr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1%252Bdeb12u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115994?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115993?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-2%3Fdistro=trixie" } ], "aliases": [ "CVE-2008-5250" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bszr-887y-2yg7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/92898?format=api", "vulnerability_id": "VCID-n95m-rbx3-hqf4", "summary": "Cross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x before 1.12.2, and 1.13.x before 1.13.3 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2008-5252", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00413", "scoring_system": "epss", "scoring_elements": "0.61858", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00413", "scoring_system": "epss", "scoring_elements": "0.61907", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00413", "scoring_system": "epss", "scoring_elements": "0.61914", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00413", "scoring_system": "epss", "scoring_elements": "0.61903", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00413", "scoring_system": "epss", "scoring_elements": "0.61888", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2008-5252" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5252", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5252" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508870", "reference_id": "508870", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508870" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/116013?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.13.3-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.13.3-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115992?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6abq-6jq6-cfhg" }, { "vulnerability": "VCID-7btv-s4q8-muds" }, { "vulnerability": "VCID-cx2g-7k39-9kc6" }, { "vulnerability": "VCID-dnka-4jmd-uudb" }, { "vulnerability": "VCID-qpyg-4cts-z3gz" }, { "vulnerability": "VCID-zv3h-mucp-bkhr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115990?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.39.17-1%2Bdeb12u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cx2g-7k39-9kc6" }, { "vulnerability": "VCID-zv3h-mucp-bkhr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1%252Bdeb12u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115994?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115993?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-2%3Fdistro=trixie" } ], "aliases": [ "CVE-2008-5252" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n95m-rbx3-hqf4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/92896?format=api", "vulnerability_id": "VCID-nvw7-6dkp-t7ca", "summary": "Cross-site scripting (XSS) vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2008-5249", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00442", "scoring_system": "epss", "scoring_elements": "0.6358", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00442", "scoring_system": "epss", "scoring_elements": "0.63623", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00442", "scoring_system": "epss", "scoring_elements": "0.6363", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00442", "scoring_system": "epss", "scoring_elements": "0.63621", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00442", "scoring_system": "epss", "scoring_elements": "0.6361", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2008-5249" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5249", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5249" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508868", "reference_id": "508868", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508868" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/116013?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.13.3-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.13.3-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115992?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6abq-6jq6-cfhg" }, { "vulnerability": "VCID-7btv-s4q8-muds" }, { "vulnerability": "VCID-cx2g-7k39-9kc6" }, { "vulnerability": "VCID-dnka-4jmd-uudb" }, { "vulnerability": "VCID-qpyg-4cts-z3gz" }, { "vulnerability": "VCID-zv3h-mucp-bkhr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115990?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.39.17-1%2Bdeb12u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cx2g-7k39-9kc6" }, { "vulnerability": "VCID-zv3h-mucp-bkhr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1%252Bdeb12u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115994?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/115993?format=api", "purl": "pkg:deb/debian/mediawiki@1:1.43.8%2Bdfsg-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.43.8%252Bdfsg-2%3Fdistro=trixie" } ], "aliases": [ "CVE-2008-5249" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nvw7-6dkp-t7ca" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.13.3-1%3Fdistro=trixie" }