Lookup for vulnerable packages by Package URL.

GET /api/packages/126225?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/126225?format=api",
    "purl": "pkg:rpm/redhat/httpd@2.2.17-15.4.ep5?arch=el5",
    "type": "rpm",
    "namespace": "redhat",
    "name": "httpd",
    "version": "2.2.17-15.4.ep5",
    "qualifiers": {
        "arch": "el5"
    },
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": null,
    "latest_non_vulnerable_version": null,
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3732?format=api",
            "vulnerability_id": "VCID-53da-z9gn-n7f2",
            "summary": "A flaw was found in mod_log_config. If the '%{cookiename}C' log format string is in use, a remote attacker could send a specific cookie causing a crash. This crash would only be a denial of service if using a threaded MPM.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0021.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0021.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0021",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.3296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9689",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.3296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96858",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.3296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96866",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.3296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96871",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.3296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96875",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.3296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96884",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.3296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96885",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.3296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96888",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.3296",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96889",
                            "published_at": "2026-04-12T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0021"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0021",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0021"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=785065",
                    "reference_id": "785065",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=785065"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2012-0021.json",
                    "reference_id": "CVE-2012-0021",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "low",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2012-0021.json"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201206-25",
                    "reference_id": "GLSA-201206-25",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201206-25"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0542",
                    "reference_id": "RHSA-2012:0542",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0542"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0543",
                    "reference_id": "RHSA-2012:0543",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0543"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1368-1/",
                    "reference_id": "USN-1368-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1368-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-0021"
            ],
            "risk_score": 1.1,
            "exploitability": "0.5",
            "weighted_severity": "2.1",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-53da-z9gn-n7f2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3730?format=api",
            "vulnerability_id": "VCID-5yez-d5nj-q7eq",
            "summary": "An integer overflow flaw was found which, when the mod_setenvif module is enabled, could allow local users to gain privileges via a .htaccess file.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3607.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3607.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3607",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00242",
                            "scoring_system": "epss",
                            "scoring_elements": "0.47455",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00242",
                            "scoring_system": "epss",
                            "scoring_elements": "0.47395",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00242",
                            "scoring_system": "epss",
                            "scoring_elements": "0.47429",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00242",
                            "scoring_system": "epss",
                            "scoring_elements": "0.4745",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00242",
                            "scoring_system": "epss",
                            "scoring_elements": "0.47399",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00242",
                            "scoring_system": "epss",
                            "scoring_elements": "0.47454",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00242",
                            "scoring_system": "epss",
                            "scoring_elements": "0.47473",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00242",
                            "scoring_system": "epss",
                            "scoring_elements": "0.47448",
                            "published_at": "2026-04-12T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3607"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3607",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3607"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=769844",
                    "reference_id": "769844",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=769844"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2011-3607.json",
                    "reference_id": "CVE-2011-3607",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "low",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2011-3607.json"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/41769.txt",
                    "reference_id": "CVE-2011-4415;CVE-2011-3607",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/41769.txt"
                },
                {
                    "reference_url": "http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/",
                    "reference_id": "CVE-2011-4415;CVE-2011-3607",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201206-25",
                    "reference_id": "GLSA-201206-25",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201206-25"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0128",
                    "reference_id": "RHSA-2012:0128",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0128"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0323",
                    "reference_id": "RHSA-2012:0323",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0323"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0542",
                    "reference_id": "RHSA-2012:0542",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0542"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0543",
                    "reference_id": "RHSA-2012:0543",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0543"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1368-1/",
                    "reference_id": "USN-1368-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1368-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2011-3607"
            ],
            "risk_score": 4.2,
            "exploitability": "2.0",
            "weighted_severity": "2.1",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5yez-d5nj-q7eq"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3728?format=api",
            "vulnerability_id": "VCID-6vze-zk58-7yep",
            "summary": "A flaw was found when mod_proxy_ajp is used together with mod_proxy_balancer. Given a specific configuration, a remote attacker could send certain malformed HTTP requests, putting a backend server into an error state until the retry timeout expired. This could lead to a temporary denial of service.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3348.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3348.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3348",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.34026",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96969",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.34026",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9694",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.34026",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96947",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.34026",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96952",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.34026",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96955",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.34026",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96963",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.34026",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96964",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.34026",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96967",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.34026",
                            "scoring_system": "epss",
                            "scoring_elements": "0.96968",
                            "published_at": "2026-04-12T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3348"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3348",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3348"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=736690",
                    "reference_id": "736690",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=736690"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2011-3348.json",
                    "reference_id": "CVE-2011-3348",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "moderate",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2011-3348.json"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201206-25",
                    "reference_id": "GLSA-201206-25",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201206-25"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2011:1391",
                    "reference_id": "RHSA-2011:1391",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2011:1391"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0542",
                    "reference_id": "RHSA-2012:0542",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0542"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0543",
                    "reference_id": "RHSA-2012:0543",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0543"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1259-1/",
                    "reference_id": "USN-1259-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1259-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2011-3348"
            ],
            "risk_score": 2.4,
            "exploitability": "0.5",
            "weighted_severity": "4.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6vze-zk58-7yep"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3734?format=api",
            "vulnerability_id": "VCID-d4rc-pnv5-6uc8",
            "summary": "A flaw was found in the default error response for status code 400. This flaw could be used by an attacker to expose \"httpOnly\" cookies when no custom ErrorDocument is specified.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0053.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0053.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0053",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.55955",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98088",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.55955",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98081",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.55955",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98084",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.55955",
                            "scoring_system": "epss",
                            "scoring_elements": "0.981",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.55955",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98093",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.55955",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98099",
                            "published_at": "2026-04-12T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0053"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0053",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0053"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=785069",
                    "reference_id": "785069",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=785069"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2012-0053.json",
                    "reference_id": "CVE-2012-0053",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "moderate",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2012-0053.json"
                },
                {
                    "reference_url": "https://gist.github.com/1955a1c28324d4724b7b/7fe51f2a66c1d4a40a736540b3ad3fde02b7fb08",
                    "reference_id": "CVE-2012-0053;OSVDB-78556",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gist.github.com/1955a1c28324d4724b7b/7fe51f2a66c1d4a40a736540b3ad3fde02b7fb08"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/18442.html",
                    "reference_id": "CVE-2012-0053;OSVDB-78556",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/18442.html"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201206-25",
                    "reference_id": "GLSA-201206-25",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201206-25"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0128",
                    "reference_id": "RHSA-2012:0128",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0128"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0323",
                    "reference_id": "RHSA-2012:0323",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0323"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0542",
                    "reference_id": "RHSA-2012:0542",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0542"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0543",
                    "reference_id": "RHSA-2012:0543",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0543"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1368-1/",
                    "reference_id": "USN-1368-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1368-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-0053"
            ],
            "risk_score": 9.6,
            "exploitability": "2.0",
            "weighted_severity": "4.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d4rc-pnv5-6uc8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3729?format=api",
            "vulnerability_id": "VCID-prd8-51a5-pygj",
            "summary": "An exposure was found when using mod_proxy in reverse proxy mode. In certain configurations using RewriteRule with proxy flag or ProxyPassMatch, a remote attacker could cause the reverse proxy to connect to an arbitrary server, possibly disclosing sensitive information from internal web servers not directly accessible to attacker. No update of 1.3 will be released.\nPatches will be published to https://archive.apache.org/dist/httpd/patches/apply_to_1.3.42/",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3368.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3368.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3368",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.79136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.99065",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.79136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.99054",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.79136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.99055",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.79136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.99059",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.79136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.99062",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.79136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.99063",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.79136",
                            "scoring_system": "epss",
                            "scoring_elements": "0.99064",
                            "published_at": "2026-04-11T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3368"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3368",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3368"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=740045",
                    "reference_id": "740045",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=740045"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2011-3368.json",
                    "reference_id": "CVE-2011-3368",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "moderate",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2011-3368.json"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/17969.py",
                    "reference_id": "CVE-2011-3368;OSVDB-76079",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/17969.py"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201206-25",
                    "reference_id": "GLSA-201206-25",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201206-25"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2011:1391",
                    "reference_id": "RHSA-2011:1391",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2011:1391"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2011:1392",
                    "reference_id": "RHSA-2011:1392",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2011:1392"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0542",
                    "reference_id": "RHSA-2012:0542",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0542"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0543",
                    "reference_id": "RHSA-2012:0543",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0543"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1259-1/",
                    "reference_id": "USN-1259-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1259-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2011-3368"
            ],
            "risk_score": 9.6,
            "exploitability": "2.0",
            "weighted_severity": "4.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-prd8-51a5-pygj"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3733?format=api",
            "vulnerability_id": "VCID-ym93-sxb8-fkdm",
            "summary": "A flaw was found in the handling of the scoreboard. An unprivileged child process could cause the parent process to crash at shutdown rather than terminate cleanly.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0031.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0031.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0031",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01196",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78884",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.01196",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78837",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.01196",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78843",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.01196",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78872",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.01196",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78854",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.01196",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78879",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.01196",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78886",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.01196",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78909",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.01196",
                            "scoring_system": "epss",
                            "scoring_elements": "0.78893",
                            "published_at": "2026-04-12T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0031"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0031",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0031"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=773744",
                    "reference_id": "773744",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=773744"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/41768.txt",
                    "reference_id": "CVE-2012-0031",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/41768.txt"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2012-0031.json",
                    "reference_id": "CVE-2012-0031",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "low",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2012-0031.json"
                },
                {
                    "reference_url": "http://www.halfdog.net/Security/2011/ApacheScoreboardInvalidFreeOnShutdown/",
                    "reference_id": "CVE-2012-0031",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "http://www.halfdog.net/Security/2011/ApacheScoreboardInvalidFreeOnShutdown/"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201206-25",
                    "reference_id": "GLSA-201206-25",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201206-25"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0128",
                    "reference_id": "RHSA-2012:0128",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0128"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0323",
                    "reference_id": "RHSA-2012:0323",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0323"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0542",
                    "reference_id": "RHSA-2012:0542",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0542"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0543",
                    "reference_id": "RHSA-2012:0543",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0543"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/1368-1/",
                    "reference_id": "USN-1368-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/1368-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2012-0031"
            ],
            "risk_score": 4.2,
            "exploitability": "2.0",
            "weighted_severity": "2.1",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ym93-sxb8-fkdm"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": "9.6",
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/httpd@2.2.17-15.4.ep5%3Farch=el5"
}