Lookup for vulnerable packages by Package URL.

GET /api/packages/190451?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/190451?format=api",
    "purl": "pkg:ebuild/dev-lang/python@2.7.3-r1",
    "type": "ebuild",
    "namespace": "dev-lang",
    "name": "python",
    "version": "2.7.3-r1",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": false,
    "next_non_vulnerable_version": "2.7.9-r1",
    "latest_non_vulnerable_version": "3.14.0_beta2",
    "affected_by_vulnerabilities": [],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/98995?format=api",
            "vulnerability_id": "VCID-16qu-ujqu-hybc",
            "summary": "Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1150.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1150.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-1150",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01741",
                            "scoring_system": "epss",
                            "scoring_elements": "0.82858",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-1150"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=750555",
                    "reference_id": "750555",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=750555"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-04",
                    "reference_id": "GLSA-201401-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-04"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0744",
                    "reference_id": "RHSA-2012:0744",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0744"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0745",
                    "reference_id": "RHSA-2012:0745",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0745"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190450?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.6.8",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.6.8"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190451?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.7.3-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.7.3-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190452?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.2.5-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.2.5-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190453?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.3.2-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.3.2-r1"
                }
            ],
            "aliases": [
                "CVE-2012-1150"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-16qu-ujqu-hybc"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37585?format=api",
            "vulnerability_id": "VCID-172n-hbu2-6fd3",
            "summary": "Uncontrolled Resource Consumption\nAlgorithmic complexity vulnerability in the `ssl.match_hostname` function and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.",
            "references": [
                {
                    "reference_url": "http://bugs.python.org/issue17980",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "http://bugs.python.org/issue17980"
                },
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-2099",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.02979",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86778",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-2099"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2099",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2099"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709066",
                    "reference_id": "709066",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709066"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709067",
                    "reference_id": "709067",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709067"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709068",
                    "reference_id": "709068",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709068"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709069",
                    "reference_id": "709069",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709069"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709070",
                    "reference_id": "709070",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709070"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=963260",
                    "reference_id": "963260",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=963260"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-04",
                    "reference_id": "GLSA-201401-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-04"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1263",
                    "reference_id": "RHSA-2014:1263",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1263"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2014:1690",
                    "reference_id": "RHSA-2014:1690",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2014:1690"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2015:0042",
                    "reference_id": "RHSA-2015:0042",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2015:0042"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2016:1166",
                    "reference_id": "RHSA-2016:1166",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2016:1166"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190450?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.6.8",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.6.8"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190451?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.7.3-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.7.3-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190452?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.2.5-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.2.5-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190453?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.3.2-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.3.2-r1"
                }
            ],
            "aliases": [
                "CVE-2013-2099"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-172n-hbu2-6fd3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/98988?format=api",
            "vulnerability_id": "VCID-c6vf-8bw4-8bgj",
            "summary": "The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier for remote attackers to conduct denial of service attacks that terminate these applications via network connections.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3492.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3492.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2010-3492",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01356",
                            "scoring_system": "epss",
                            "scoring_elements": "0.80463",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2010-3492"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=638330",
                    "reference_id": "638330",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=638330"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-04",
                    "reference_id": "GLSA-201401-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-04"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190450?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.6.8",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.6.8"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190451?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.7.3-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.7.3-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190452?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.2.5-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.2.5-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190453?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.3.2-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.3.2-r1"
                }
            ],
            "aliases": [
                "CVE-2010-3492"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c6vf-8bw4-8bgj"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/98986?format=api",
            "vulnerability_id": "VCID-hgg5-afas-gqem",
            "summary": "Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service (application crash) via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a buffer overflow.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3143.5.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1634.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1634.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2010-1634",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01215",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7935",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2010-1634"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=590690",
                    "reference_id": "590690",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590690"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-04",
                    "reference_id": "GLSA-201401-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-04"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2011:0027",
                    "reference_id": "RHSA-2011:0027",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2011:0027"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2011:0491",
                    "reference_id": "RHSA-2011:0491",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2011:0491"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190450?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.6.8",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.6.8"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190451?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.7.3-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.7.3-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190452?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.2.5-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.2.5-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190453?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.3.2-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.3.2-r1"
                }
            ],
            "aliases": [
                "CVE-2010-1634"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hgg5-afas-gqem"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/98987?format=api",
            "vulnerability_id": "VCID-pzy5-zxy9-g7hx",
            "summary": "The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2089.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2089.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2010-2089",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.09965",
                            "scoring_system": "epss",
                            "scoring_elements": "0.93176",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2010-2089"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=598197",
                    "reference_id": "598197",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=598197"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/unix/dos/34145.txt",
                    "reference_id": "CVE-2010-2089;OSVDB-65151",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/unix/dos/34145.txt"
                },
                {
                    "reference_url": "https://www.securityfocus.com/bid/40863/info",
                    "reference_id": "CVE-2010-2089;OSVDB-65151",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://www.securityfocus.com/bid/40863/info"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-04",
                    "reference_id": "GLSA-201401-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-04"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2011:0027",
                    "reference_id": "RHSA-2011:0027",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2011:0027"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2011:0491",
                    "reference_id": "RHSA-2011:0491",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2011:0491"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190450?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.6.8",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.6.8"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190451?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.7.3-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.7.3-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190452?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.2.5-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.2.5-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190453?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.3.2-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.3.2-r1"
                }
            ],
            "aliases": [
                "CVE-2010-2089"
            ],
            "risk_score": 0.1,
            "exploitability": "0.5",
            "weighted_severity": "0.1",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pzy5-zxy9-g7hx"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/98994?format=api",
            "vulnerability_id": "VCID-qf8d-ntcb-cyct",
            "summary": "SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0845.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0845.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0845",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.02773",
                            "scoring_system": "epss",
                            "scoring_elements": "0.86318",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0845"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=789790",
                    "reference_id": "789790",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=789790"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-04",
                    "reference_id": "GLSA-201401-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-04"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2012:0744",
                    "reference_id": "RHSA-2012:0744",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2012:0744"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190450?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.6.8",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.6.8"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190451?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.7.3-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.7.3-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190452?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.2.5-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.2.5-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190453?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.3.2-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.3.2-r1"
                }
            ],
            "aliases": [
                "CVE-2012-0845"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qf8d-ntcb-cyct"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/116100?format=api",
            "vulnerability_id": "VCID-qff9-jcqa-jubc",
            "summary": "Python: SMTP proxy RFC 2821 module DoS (uncaught exception) (Issue #9129)",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3493.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3493.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2010-3493",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.0192",
                            "scoring_system": "epss",
                            "scoring_elements": "0.83682",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2010-3493"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=632200",
                    "reference_id": "632200",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=632200"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-04",
                    "reference_id": "GLSA-201401-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-04"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2011:0491",
                    "reference_id": "RHSA-2011:0491",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2011:0491"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2011:0492",
                    "reference_id": "RHSA-2011:0492",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2011:0492"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2011:0554",
                    "reference_id": "RHSA-2011:0554",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2011:0554"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190450?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.6.8",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.6.8"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190451?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.7.3-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.7.3-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190452?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.2.5-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.2.5-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190453?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.3.2-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.3.2-r1"
                }
            ],
            "aliases": [
                "CVE-2010-3493"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qff9-jcqa-jubc"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/117067?format=api",
            "vulnerability_id": "VCID-xqzx-p4gv-kfdw",
            "summary": "(CGIHTTPServer): CGI script source code disclosure",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1015.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1015.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-1015",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00252",
                            "scoring_system": "epss",
                            "scoring_elements": "0.48681",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-1015"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=680094",
                    "reference_id": "680094",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=680094"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201401-04",
                    "reference_id": "GLSA-201401-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201401-04"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2011:0491",
                    "reference_id": "RHSA-2011:0491",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2011:0491"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2011:0492",
                    "reference_id": "RHSA-2011:0492",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2011:0492"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2011:0554",
                    "reference_id": "RHSA-2011:0554",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2011:0554"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190450?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.6.8",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.6.8"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190451?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@2.7.3-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.7.3-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190452?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.2.5-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.2.5-r1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/190453?format=api",
                    "purl": "pkg:ebuild/dev-lang/python@3.3.2-r1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.3.2-r1"
                }
            ],
            "aliases": [
                "CVE-2011-1015"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xqzx-p4gv-kfdw"
        }
    ],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.7.3-r1"
}