Lookup for vulnerable packages by Package URL.

GET /api/packages/119574?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/119574?format=api",
    "purl": "pkg:rpm/redhat/tfm-rubygem-safemode@1.2.3-1?arch=el7sat",
    "type": "rpm",
    "namespace": "redhat",
    "name": "tfm-rubygem-safemode",
    "version": "1.2.3-1",
    "qualifiers": {
        "arch": "el7sat"
    },
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": null,
    "latest_non_vulnerable_version": null,
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6858?format=api",
            "vulnerability_id": "VCID-1mw1-384y-huc7",
            "summary": "Uncontrolled Resource Consumption\nAlgorithmic complexity vulnerability in the `ssl.match_hostname` function and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.",
            "references": [
                {
                    "reference_url": "http://bugs.python.org/issue17980",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://bugs.python.org/issue17980"
                },
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-2099",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.05238",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89926",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.05238",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89929",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.05238",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89942",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.05238",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89948",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.05238",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89964",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.05238",
                            "scoring_system": "epss",
                            "scoring_elements": "0.8997",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.05238",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89978",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.05238",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89976",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.05238",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89969",
                            "published_at": "2026-04-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-2099"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2099",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2099"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2099",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2099"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709066",
                    "reference_id": "709066",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709066"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709067",
                    "reference_id": "709067",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709067"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709068",
                    "reference_id": "709068",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709068"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709069",
                    "reference_id": "709069",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709069"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709070",
                    "reference_id": "709070",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709070"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=963260",
                    "reference_id": "963260",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=963260"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-04",
                    "reference_id": "GLSA-201401-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-04"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1263",
                    "reference_id": "RHSA-2014:1263",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1263"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1690",
                    "reference_id": "RHSA-2014:1690",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1690"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0042",
                    "reference_id": "RHSA-2015:0042",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0042"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2016:1166",
                    "reference_id": "RHSA-2016:1166",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2016:1166"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1983-1/",
                    "reference_id": "USN-1983-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1983-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1984-1/",
                    "reference_id": "USN-1984-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1984-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1985-1/",
                    "reference_id": "USN-1985-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1985-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2013-2099"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1mw1-384y-huc7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/85949?format=api",
            "vulnerability_id": "VCID-77c9-jb1m-6qe2",
            "summary": "qpid-cpp: 3 qpidd DoS issues in AMQP 0-10 protocol handling",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0203.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0203.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0203",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.16987",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94946",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.16987",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94955",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.16987",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94957",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.16987",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94959",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.16987",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94968",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.16987",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94972",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.16987",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94976",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.16987",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94978",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.16987",
                            "scoring_system": "epss",
                            "scoring_elements": "0.94981",
                            "published_at": "2026-04-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0203"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181721",
                    "reference_id": "1181721",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181721"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0660",
                    "reference_id": "RHSA-2015:0660",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0660"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0661",
                    "reference_id": "RHSA-2015:0661",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0661"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0662",
                    "reference_id": "RHSA-2015:0662",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0662"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0707",
                    "reference_id": "RHSA-2015:0707",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0707"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0708",
                    "reference_id": "RHSA-2015:0708",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0708"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2015-0203"
            ],
            "risk_score": 0.1,
            "exploitability": "0.5",
            "weighted_severity": "0.2",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-77c9-jb1m-6qe2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/85870?format=api",
            "vulnerability_id": "VCID-9gb8-xvrc-aqgb",
            "summary": "qpid-cpp: anonymous access to qpidd cannot be prevented",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0223.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0223.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0223",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.02275",
                            "scoring_system": "epss",
                            "scoring_elements": "0.84587",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.02275",
                            "scoring_system": "epss",
                            "scoring_elements": "0.84601",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.02275",
                            "scoring_system": "epss",
                            "scoring_elements": "0.84621",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.02275",
                            "scoring_system": "epss",
                            "scoring_elements": "0.84623",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.02275",
                            "scoring_system": "epss",
                            "scoring_elements": "0.84645",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.02275",
                            "scoring_system": "epss",
                            "scoring_elements": "0.84651",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.02275",
                            "scoring_system": "epss",
                            "scoring_elements": "0.84669",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.02275",
                            "scoring_system": "epss",
                            "scoring_elements": "0.84664",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.02275",
                            "scoring_system": "epss",
                            "scoring_elements": "0.84659",
                            "published_at": "2026-04-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0223"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1186308",
                    "reference_id": "1186308",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1186308"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0660",
                    "reference_id": "RHSA-2015:0660",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0660"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0661",
                    "reference_id": "RHSA-2015:0661",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0661"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0662",
                    "reference_id": "RHSA-2015:0662",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0662"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0707",
                    "reference_id": "RHSA-2015:0707",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0707"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0708",
                    "reference_id": "RHSA-2015:0708",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0708"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2015-0223"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9gb8-xvrc-aqgb"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/60423?format=api",
            "vulnerability_id": "VCID-fq2t-c2nv-23ce",
            "summary": "A vulnerability in MongoDB can lead to a Denial of Service\n    condition.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1609.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1609.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1609",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01693",
                            "scoring_system": "epss",
                            "scoring_elements": "0.82181",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.01693",
                            "scoring_system": "epss",
                            "scoring_elements": "0.82195",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.01693",
                            "scoring_system": "epss",
                            "scoring_elements": "0.82215",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.01693",
                            "scoring_system": "epss",
                            "scoring_elements": "0.82211",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.01693",
                            "scoring_system": "epss",
                            "scoring_elements": "0.82238",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.01693",
                            "scoring_system": "epss",
                            "scoring_elements": "0.82245",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.01693",
                            "scoring_system": "epss",
                            "scoring_elements": "0.82264",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.01693",
                            "scoring_system": "epss",
                            "scoring_elements": "0.82257",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.01693",
                            "scoring_system": "epss",
                            "scoring_elements": "0.82252",
                            "published_at": "2026-04-13T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1609"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1200446",
                    "reference_id": "1200446",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1200446"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201611-13",
                    "reference_id": "GLSA-201611-13",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201611-13"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2015-1609"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fq2t-c2nv-23ce"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/85807?format=api",
            "vulnerability_id": "VCID-jfqz-9a6e-jff7",
            "summary": "foreman: Unprivileged user can access private bookmarks of other users",
            "references": [
                {
                    "reference_url": "http://projects.theforeman.org/issues/13828",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://projects.theforeman.org/issues/13828"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHBA-2016:1500",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHBA-2016:1500"
                },
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2100.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2100.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2100",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00201",
                            "scoring_system": "epss",
                            "scoring_elements": "0.42242",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00201",
                            "scoring_system": "epss",
                            "scoring_elements": "0.4227",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00201",
                            "scoring_system": "epss",
                            "scoring_elements": "0.42198",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00201",
                            "scoring_system": "epss",
                            "scoring_elements": "0.42255",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00201",
                            "scoring_system": "epss",
                            "scoring_elements": "0.42284",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00201",
                            "scoring_system": "epss",
                            "scoring_elements": "0.42226",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00201",
                            "scoring_system": "epss",
                            "scoring_elements": "0.42276",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00201",
                            "scoring_system": "epss",
                            "scoring_elements": "0.42306",
                            "published_at": "2026-04-11T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2100"
                },
                {
                    "reference_url": "http://theforeman.org/security.html#2016-2100",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://theforeman.org/security.html#2016-2100"
                },
                {
                    "reference_url": "http://www.openwall.com/lists/oss-security/2016/03/31/2",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.openwall.com/lists/oss-security/2016/03/31/2"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310675",
                    "reference_id": "1310675",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310675"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:theforeman:foreman:1.11.0:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:theforeman:foreman:1.11.0:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:theforeman:foreman:1.11.0:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:theforeman:foreman:1.11.0:rc1:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:theforeman:foreman:1.11.0:rc1:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:theforeman:foreman:1.11.0:rc1:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2100",
                    "reference_id": "CVE-2016-2100",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.5",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:L/Au:S/C:P/I:P/A:P"
                        },
                        {
                            "value": "5.4",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2100"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2016-2100"
            ],
            "risk_score": 3.0,
            "exploitability": "0.5",
            "weighted_severity": "5.9",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jfqz-9a6e-jff7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/85866?format=api",
            "vulnerability_id": "VCID-vhxh-tpay-mbh3",
            "summary": "qpid-cpp: AMQP 0-10 protocol sequence-set maximal range DoS (incomplete CVE-2015-0203 fix)",
            "references": [
                {
                    "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178606.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178606.html"
                },
                {
                    "reference_url": "http://mail-archives.apache.org/mod_mbox/www-announce/201501.mbox/%3C54C60497.5060504%40apache.org%3E",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://mail-archives.apache.org/mod_mbox/www-announce/201501.mbox/%3C54C60497.5060504%40apache.org%3E"
                },
                {
                    "reference_url": "http://packetstormsecurity.com/files/130105/Apache-Qpid-0.30-Crash.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://packetstormsecurity.com/files/130105/Apache-Qpid-0.30-Crash.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0660.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://rhn.redhat.com/errata/RHSA-2015-0660.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0661.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://rhn.redhat.com/errata/RHSA-2015-0661.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0662.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://rhn.redhat.com/errata/RHSA-2015-0662.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0707.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://rhn.redhat.com/errata/RHSA-2015-0707.html"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHBA-2016:1500",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHBA-2016:1500"
                },
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0224.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0224.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0224",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.5601",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98102",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.5601",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98101",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.5601",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98083",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.5601",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98087",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.5601",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9809",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.5601",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98091",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.5601",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98095",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.5601",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98096",
                            "published_at": "2026-04-09T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0224"
                },
                {
                    "reference_url": "https://issues.apache.org/jira/browse/QPID-6310",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://issues.apache.org/jira/browse/QPID-6310"
                },
                {
                    "reference_url": "http://www.securityfocus.com/archive/1/534545/100/0/threaded",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.securityfocus.com/archive/1/534545/100/0/threaded"
                },
                {
                    "reference_url": "http://www.securityfocus.com/bid/72317",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.securityfocus.com/bid/72317"
                },
                {
                    "reference_url": "http://www.securitytracker.com/id/1031872",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.securitytracker.com/id/1031872"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1186302",
                    "reference_id": "1186302",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1186302"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:qpid:*:*:*:*:*:*:*:*",
                    "reference_id": "cpe:2.3:a:apache:qpid:*:*:*:*:*:*:*:*",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:qpid:*:*:*:*:*:*:*:*"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0224",
                    "reference_id": "CVE-2015-0224",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "5.0",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P"
                        },
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0224"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0660",
                    "reference_id": "RHSA-2015:0660",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0660"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0661",
                    "reference_id": "RHSA-2015:0661",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0661"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0662",
                    "reference_id": "RHSA-2015:0662",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0662"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0707",
                    "reference_id": "RHSA-2015:0707",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0707"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0708",
                    "reference_id": "RHSA-2015:0708",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0708"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2015-0224"
            ],
            "risk_score": 3.4,
            "exploitability": "0.5",
            "weighted_severity": "6.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vhxh-tpay-mbh3"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": "3.4",
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tfm-rubygem-safemode@1.2.3-1%3Farch=el7sat"
}