Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/13781?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/13781?format=api", "purl": "pkg:maven/org.apache.storm/storm-core@1.2.0", "type": "maven", "namespace": "org.apache.storm", "name": "storm-core", "version": "1.2.0", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "1.2.3", "latest_non_vulnerable_version": "2.6.0", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5904?format=api", "vulnerability_id": "VCID-6yvr-6xkk-bffc", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-0202", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00641", "scoring_system": "epss", "scoring_elements": "0.71177", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00641", "scoring_system": "epss", "scoring_elements": "0.71087", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-0202" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/apache/storm", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/storm" }, { "reference_url": "https://lists.apache.org/thread.html/220f1a77ff20749326a4c130446c5521db854da0afe81d1974b8109f@%3Cuser.storm.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/220f1a77ff20749326a4c130446c5521db854da0afe81d1974b8109f@%3Cuser.storm.apache.org%3E" }, { "reference_url": "https://mvnrepository.com/artifact/org.apache.storm/storm-core", "reference_id": "", "reference_type": "", "scores": [], "url": "https://mvnrepository.com/artifact/org.apache.storm/storm-core" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0202", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0202" }, { "reference_url": "https://github.com/advisories/GHSA-r9pv-hg64-jqrp", "reference_id": "GHSA-r9pv-hg64-jqrp", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-r9pv-hg64-jqrp" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/385776?format=api", "purl": "pkg:maven/org.apache.storm/storm-core@1.2.3", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.storm/storm-core@1.2.3" } ], "aliases": [ "CVE-2019-0202", "GHSA-r9pv-hg64-jqrp" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6yvr-6xkk-bffc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/30457?format=api", "vulnerability_id": "VCID-ptyr-knn6-afd8", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1331", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05109", "scoring_system": "epss", "scoring_elements": "0.90052", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.05109", "scoring_system": "epss", "scoring_elements": "0.90083", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1331" }, { "reference_url": "https://github.com/apache/storm/commit/22a962073c5f12dc5ab281a15d93eb5efc31ab6", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/storm/commit/22a962073c5f12dc5ab281a15d93eb5efc31ab6" }, { "reference_url": "https://github.com/apache/storm/commit/8ffa920d3894634aa078f0fdf6b02d270262caf", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/storm/commit/8ffa920d3894634aa078f0fdf6b02d270262caf" }, { "reference_url": "https://github.com/apache/storm/commit/a6bf3e421d3d37a797e3bb374fcd20a00189feb", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/storm/commit/a6bf3e421d3d37a797e3bb374fcd20a00189feb" }, { "reference_url": "https://github.com/apache/storm/commit/e3652b44a377436256f77a2749ed133bbafd2fb", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/storm/commit/e3652b44a377436256f77a2749ed133bbafd2fb" }, { "reference_url": "http://storm.apache.org/2018/06/04/storm113-released.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://storm.apache.org/2018/06/04/storm113-released.html" }, { "reference_url": "http://storm.apache.org/2018/06/04/storm122-released.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://storm.apache.org/2018/06/04/storm122-released.html" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2018/07/10/4", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2018/07/10/4" }, { "reference_url": "http://www.securityfocus.com/bid/104732", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/104732" }, { "reference_url": "http://www.securitytracker.com/id/1041273", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securitytracker.com/id/1041273" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1331", "reference_id": "CVE-2018-1331", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1331" }, { "reference_url": "https://github.com/advisories/GHSA-p8jx-x2vw-wm33", "reference_id": "GHSA-p8jx-x2vw-wm33", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-p8jx-x2vw-wm33" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13782?format=api", "purl": "pkg:maven/org.apache.storm/storm-core@1.2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6yvr-6xkk-bffc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.storm/storm-core@1.2.2" } ], "aliases": [ "CVE-2018-1331", "GHSA-p8jx-x2vw-wm33" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ptyr-knn6-afd8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/30587?format=api", "vulnerability_id": "VCID-vset-3yzp-hkgp", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-8008", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.1535", "scoring_system": "epss", "scoring_elements": "0.94791", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.1535", "scoring_system": "epss", "scoring_elements": "0.94809", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-8008" }, { "reference_url": "https://github.com/apache/storm/commit/0fc6b522487c061f89e8cdacf09f722d3f20589", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/storm/commit/0fc6b522487c061f89e8cdacf09f722d3f20589" }, { "reference_url": "https://github.com/apache/storm/commit/1117a37b01a1058897a34e11ff5156e465efb69", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/storm/commit/1117a37b01a1058897a34e11ff5156e465efb69" }, { "reference_url": "https://github.com/apache/storm/commit/efad4cca2d7d461f5f8c08a0d7b51fabeb82d0a", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/storm/commit/efad4cca2d7d461f5f8c08a0d7b51fabeb82d0a" }, { "reference_url": "https://github.com/apache/storm/commit/f61e5daf299d6c37c7ad65744d02556c94a16a4", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/storm/commit/f61e5daf299d6c37c7ad65744d02556c94a16a4" }, { "reference_url": "https://issues.apache.org/jira/browse/STORM-3052", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://issues.apache.org/jira/browse/STORM-3052" }, { "reference_url": "https://lists.apache.org/thread.html/613b2fca8bcd0a3b12c0b763ea8f7cf62e422e9f79fce6cfa5b08a58@%3Cdev.storm.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/613b2fca8bcd0a3b12c0b763ea8f7cf62e422e9f79fce6cfa5b08a58@%3Cdev.storm.apache.org%3E" }, { "reference_url": "http://www.securityfocus.com/bid/104418", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/104418" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8008", "reference_id": "CVE-2018-8008", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8008" }, { "reference_url": "https://github.com/advisories/GHSA-898j-5cc8-cmf5", "reference_id": "GHSA-898j-5cc8-cmf5", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-898j-5cc8-cmf5" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13782?format=api", "purl": "pkg:maven/org.apache.storm/storm-core@1.2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6yvr-6xkk-bffc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.storm/storm-core@1.2.2" } ], "aliases": [ "CVE-2018-8008", "GHSA-898j-5cc8-cmf5" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vset-3yzp-hkgp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/202129?format=api", "vulnerability_id": "VCID-zvf9-5q32-u3f9", "summary": "Moderate severity vulnerability that affects org.apache.storm:storm-core", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1332", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0043", "scoring_system": "epss", "scoring_elements": "0.62996", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.0043", "scoring_system": "epss", "scoring_elements": "0.63097", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1332" }, { "reference_url": "https://lists.apache.org/thread.html/50f1d6a7af27f49d2e498a9ab2975685302cd8ca47000b7c38f339a4@%3Cdev.storm.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/50f1d6a7af27f49d2e498a9ab2975685302cd8ca47000b7c38f339a4@%3Cdev.storm.apache.org%3E" }, { "reference_url": "http://www.securityfocus.com/bid/104399", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/104399" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1332", "reference_id": "CVE-2018-1332", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1332" }, { "reference_url": "https://github.com/advisories/GHSA-q35p-chc6-7x57", "reference_id": "GHSA-q35p-chc6-7x57", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-q35p-chc6-7x57" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13782?format=api", "purl": "pkg:maven/org.apache.storm/storm-core@1.2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6yvr-6xkk-bffc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.storm/storm-core@1.2.2" } ], "aliases": [ "CVE-2018-1332", "GHSA-q35p-chc6-7x57" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zvf9-5q32-u3f9" } ], "fixing_vulnerabilities": [], "risk_score": "4.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.storm/storm-core@1.2.0" }