Lookup for vulnerable packages by Package URL.

GET /api/packages/175758?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/175758?format=api",
    "purl": "pkg:rpm/redhat/ruby193-rubygem-treetop@1.4.10-6?arch=el6",
    "type": "rpm",
    "namespace": "redhat",
    "name": "ruby193-rubygem-treetop",
    "version": "1.4.10-6",
    "qualifiers": {
        "arch": "el6"
    },
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": null,
    "latest_non_vulnerable_version": null,
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/114077?format=api",
            "vulnerability_id": "VCID-4f3y-uu2b-uqfa",
            "summary": "OpenShift Enterprise and Online vulnerable to CSRF attack with REST API",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0196.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0196.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-0196",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.0011",
                            "scoring_system": "epss",
                            "scoring_elements": "0.28884",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-0196"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=901364",
                    "reference_id": "901364",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=901364"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2013-0196"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4f3y-uu2b-uqfa"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37497?format=api",
            "vulnerability_id": "VCID-ac75-ed1t-euc4",
            "summary": "XSS exploit of RDoc documentation generated by rdoc\nThis exploit may lead to cookie disclosure to third parties. The exploit exists in darkfish.js which is copied from the RDoc install location to the generated documentation. RDoc is a static documentation generation tool. Patching the library itself is insufficient to correct this exploit.",
            "references": [
                {
                    "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00015.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00015.html"
                },
                {
                    "reference_url": "http://lists.opensuse.org/opensuse-updates/2013-02/msg00048.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://lists.opensuse.org/opensuse-updates/2013-02/msg00048.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0686.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2013-0686.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0701.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2013-0701.html"
                },
                {
                    "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0728.html",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://rhn.redhat.com/errata/RHSA-2013-0728.html"
                },
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0256.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "5.4",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0256.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-0256",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.02671",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86094",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-0256"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=907820",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=907820"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-v2r9-c84j-v7xm",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/advisories/GHSA-v2r9-c84j-v7xm"
                },
                {
                    "reference_url": "https://github.com/rdoc/rdoc",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/rdoc/rdoc"
                },
                {
                    "reference_url": "https://github.com/rdoc/rdoc/commit/ffa87887ee0517793df7541629a470e331f9fe60",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/rdoc/rdoc/commit/ffa87887ee0517793df7541629a470e331f9fe60"
                },
                {
                    "reference_url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rdoc/CVE-2013-0256.yml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rdoc/CVE-2013-0256.yml"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0256",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0256"
                },
                {
                    "reference_url": "https://web.archive.org/web/20130402173730/http://blog.segment7.net:80/2013/02/06/rdoc-xss-vulnerability-cve-2013-0256-releases-3-9-5-3-12-1-4-0-0-rc-2",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://web.archive.org/web/20130402173730/http://blog.segment7.net:80/2013/02/06/rdoc-xss-vulnerability-cve-2013-0256-releases-3-9-5-3-12-1-4-0-0-rc-2"
                },
                {
                    "reference_url": "http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256"
                },
                {
                    "reference_url": "http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/"
                },
                {
                    "reference_url": "http://www.ubuntu.com/usn/USN-1733-1",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "http://www.ubuntu.com/usn/USN-1733-1"
                },
                {
                    "reference_url": "https://github.com/rdoc/rdoc/blob/master/CVE-2013-0256.rdoc",
                    "reference_id": "CVE-2013-0256.RDOC",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/rdoc/rdoc/blob/master/CVE-2013-0256.rdoc"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2013:0686",
                    "reference_id": "RHSA-2013:0686",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2013:0686"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2013:0701",
                    "reference_id": "RHSA-2013:0701",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2013:0701"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2013:0728",
                    "reference_id": "RHSA-2013:0728",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2013:0728"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2013-0256",
                "GHSA-v2r9-c84j-v7xm",
                "OSV-90004"
            ],
            "risk_score": 3.1,
            "exploitability": "0.5",
            "weighted_severity": "6.2",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ac75-ed1t-euc4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/114492?format=api",
            "vulnerability_id": "VCID-cm7h-jhnn-xbap",
            "summary": "2: miq_policy/explorer SQL injection",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2050.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2050.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-2050",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.54161",
                            "scoring_system": "epss",
                            "scoring_elements": "0.98062",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-2050"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=959062",
                    "reference_id": "959062",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=959062"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2013-2050"
            ],
            "risk_score": 1.0,
            "exploitability": "2.0",
            "weighted_severity": "0.5",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cm7h-jhnn-xbap"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/114588?format=api",
            "vulnerability_id": "VCID-ega3-9wzs-muee",
            "summary": "interface: Ruby code injection",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4172.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4172.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4172",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00558",
                            "scoring_system": "epss",
                            "scoring_elements": "0.68573",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4172"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=988644",
                    "reference_id": "988644",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=988644"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2013:1157",
                    "reference_id": "RHSA-2013:1157",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2013:1157"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2013-4172"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ega3-9wzs-muee"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/58336?format=api",
            "vulnerability_id": "VCID-faaq-hgah-37av",
            "summary": "Random numbers generated by contrib/pgcrypto functions may be easy for another database user to guessmore details",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1900.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1900.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-1900",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00566",
                            "scoring_system": "epss",
                            "scoring_elements": "0.68821",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-1900"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1899",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1899"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1900",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1900"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1901",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1901"
                },
                {
                    "reference_url": "https://www.postgresql.org/support/security/CVE-2013-1900/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://www.postgresql.org/support/security/CVE-2013-1900/"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=929255",
                    "reference_id": "929255",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=929255"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201408-15",
                    "reference_id": "GLSA-201408-15",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201408-15"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2013:1475",
                    "reference_id": "RHSA-2013:1475",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2013:1475"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2013-1900"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-faaq-hgah-37av"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/114491?format=api",
            "vulnerability_id": "VCID-kbua-zg8d-1bdy",
            "summary": "2: static secret_token.rb value",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2049.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2049.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-2049",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.0016",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36585",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-2049"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=959041",
                    "reference_id": "959041",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=959041"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2013-2049"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kbua-zg8d-1bdy"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/58337?format=api",
            "vulnerability_id": "VCID-swkw-zcep-subw",
            "summary": "A connection request containing a database name that begins with \"-\" may be crafted to damage or destroy files within a server's data directorymore details",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1899.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1899.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-1899",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.81124",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9918",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-1899"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1899",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1899"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1900",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1900"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1901",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1901"
                },
                {
                    "reference_url": "https://www.postgresql.org/support/security/CVE-2013-1899/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://www.postgresql.org/support/security/CVE-2013-1899/"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=929223",
                    "reference_id": "929223",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=929223"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201408-15",
                    "reference_id": "GLSA-201408-15",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201408-15"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2013-1899"
            ],
            "risk_score": 1.4,
            "exploitability": "2.0",
            "weighted_severity": "0.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-swkw-zcep-subw"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/58335?format=api",
            "vulnerability_id": "VCID-t2tu-jx5e-5uhx",
            "summary": "An unprivileged user can run commands that could interfere with in-progress backups.more details",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1901.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1901.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-1901",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00215",
                            "scoring_system": "epss",
                            "scoring_elements": "0.44015",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-1901"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1899",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1899"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1900",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1900"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1901",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1901"
                },
                {
                    "reference_url": "https://www.postgresql.org/support/security/CVE-2013-1901/",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://www.postgresql.org/support/security/CVE-2013-1901/"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=929328",
                    "reference_id": "929328",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=929328"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201408-15",
                    "reference_id": "GLSA-201408-15",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201408-15"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2013-1901"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-t2tu-jx5e-5uhx"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/114489?format=api",
            "vulnerability_id": "VCID-vf3m-pymd-zbam",
            "summary": "CloudForms: user password stored in recoverable format",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4423.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4423.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4423",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00104",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27971",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4423"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1018345",
                    "reference_id": "1018345",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1018345"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2013-4423"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vf3m-pymd-zbam"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/114490?format=api",
            "vulnerability_id": "VCID-vmfv-kch1-uyh6",
            "summary": "EVM: CSRF",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0185.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0185.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-0185",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00099",
                            "scoring_system": "epss",
                            "scoring_elements": "0.27011",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-0185"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=895345",
                    "reference_id": "895345",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895345"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2013-0185"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vmfv-kch1-uyh6"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": "3.1",
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby193-rubygem-treetop@1.4.10-6%3Farch=el6"
}