Lookup for vulnerable packages by Package URL.

GET /api/packages/194680?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/194680?format=api",
    "purl": "pkg:ebuild/www-servers/apache@2.4.41",
    "type": "ebuild",
    "namespace": "www-servers",
    "name": "apache",
    "version": "2.4.41",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": false,
    "next_non_vulnerable_version": "2.4.46",
    "latest_non_vulnerable_version": "2.4.62",
    "affected_by_vulnerabilities": [],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51075?format=api",
            "vulnerability_id": "VCID-5sf7-wq36-5ye3",
            "summary": "A malicious client could perform a DoS attack by flooding a connection with requests and basically never reading responses on the TCP connection. Depending on h2 worker dimensioning, it was possible to block those with relatively few connections.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9517.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9517.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9517",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.04563",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89387",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9517"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868",
                    "reference_id": "1741868",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2019-9517.json",
                    "reference_id": "CVE-2019-9517",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "moderate",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2019-9517.json"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201909-04",
                    "reference_id": "GLSA-201909-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201909-04"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2019:2893",
                    "reference_id": "RHSA-2019:2893",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2019:2893"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2019:2925",
                    "reference_id": "RHSA-2019:2925",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2019:2925"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2019:2939",
                    "reference_id": "RHSA-2019:2939",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2019:2939"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2019:2946",
                    "reference_id": "RHSA-2019:2946",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2019:2946"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2019:2949",
                    "reference_id": "RHSA-2019:2949",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2019:2949"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2019:2950",
                    "reference_id": "RHSA-2019:2950",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2019:2950"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2019:2955",
                    "reference_id": "RHSA-2019:2955",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2019:2955"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2019:3932",
                    "reference_id": "RHSA-2019:3932",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2019:3932"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2019:3933",
                    "reference_id": "RHSA-2019:3933",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2019:3933"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2019:3935",
                    "reference_id": "RHSA-2019:3935",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2019:3935"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:0922",
                    "reference_id": "RHSA-2020:0922",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:0922"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:0983",
                    "reference_id": "RHSA-2020:0983",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:0983"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:1445",
                    "reference_id": "RHSA-2020:1445",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:1445"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/194680?format=api",
                    "purl": "pkg:ebuild/www-servers/apache@2.4.41",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/apache@2.4.41"
                }
            ],
            "aliases": [
                "CVE-2019-9517"
            ],
            "risk_score": 3.4,
            "exploitability": "0.5",
            "weighted_severity": "6.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5sf7-wq36-5ye3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51077?format=api",
            "vulnerability_id": "VCID-7bxa-rkrq-dyf7",
            "summary": "Using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10082.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10082.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10082",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.4206",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97509",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10082"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1743974",
                    "reference_id": "1743974",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1743974"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2019-10082.json",
                    "reference_id": "CVE-2019-10082",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "moderate",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2019-10082.json"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201909-04",
                    "reference_id": "GLSA-201909-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201909-04"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:1336",
                    "reference_id": "RHSA-2020:1336",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:1336"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:1337",
                    "reference_id": "RHSA-2020:1337",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:1337"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:4751",
                    "reference_id": "RHSA-2020:4751",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:4751"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/194680?format=api",
                    "purl": "pkg:ebuild/www-servers/apache@2.4.41",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/apache@2.4.41"
                }
            ],
            "aliases": [
                "CVE-2019-10082"
            ],
            "risk_score": 3.0,
            "exploitability": "0.5",
            "weighted_severity": "5.9",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7bxa-rkrq-dyf7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51080?format=api",
            "vulnerability_id": "VCID-7pxa-tvz9-u7ht",
            "summary": "Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10098.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.7",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10098.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10098",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.77398",
                            "scoring_system": "epss",
                            "scoring_elements": "0.99001",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10098"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1743959",
                    "reference_id": "1743959",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1743959"
                },
                {
                    "reference_url": "https://0day.work/open-redirects-in-improperly-configured-mod_rewrite-rules-poc-for-cve-2019-10098/",
                    "reference_id": "CVE-2019-10098",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://0day.work/open-redirects-in-improperly-configured-mod_rewrite-rules-poc-for-cve-2019-10098/"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/47689.md",
                    "reference_id": "CVE-2019-10098",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/47689.md"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2019-10098.json",
                    "reference_id": "CVE-2019-10098",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "low",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2019-10098.json"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201909-04",
                    "reference_id": "GLSA-201909-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201909-04"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:1336",
                    "reference_id": "RHSA-2020:1336",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:1336"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:1337",
                    "reference_id": "RHSA-2020:1337",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:1337"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:2263",
                    "reference_id": "RHSA-2020:2263",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:2263"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:3958",
                    "reference_id": "RHSA-2020:3958",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:3958"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:4751",
                    "reference_id": "RHSA-2020:4751",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:4751"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/194680?format=api",
                    "purl": "pkg:ebuild/www-servers/apache@2.4.41",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/apache@2.4.41"
                }
            ],
            "aliases": [
                "CVE-2019-10098"
            ],
            "risk_score": 1.6,
            "exploitability": "0.5",
            "weighted_severity": "3.3",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7pxa-tvz9-u7ht"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51079?format=api",
            "vulnerability_id": "VCID-8a5y-wnbc-7yb5",
            "summary": "When mod_remoteip was configured to use a trusted intermediary proxy server using the \"PROXY\" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10097.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.6",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10097.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10097",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.23546",
                            "scoring_system": "epss",
                            "scoring_elements": "0.9608",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10097"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1743996",
                    "reference_id": "1743996",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1743996"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2019-10097.json",
                    "reference_id": "CVE-2019-10097",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "moderate",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2019-10097.json"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201909-04",
                    "reference_id": "GLSA-201909-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201909-04"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2019:4126",
                    "reference_id": "RHSA-2019:4126",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2019:4126"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:1336",
                    "reference_id": "RHSA-2020:1336",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:1336"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:1337",
                    "reference_id": "RHSA-2020:1337",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:1337"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:4751",
                    "reference_id": "RHSA-2020:4751",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:4751"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/194680?format=api",
                    "purl": "pkg:ebuild/www-servers/apache@2.4.41",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/apache@2.4.41"
                }
            ],
            "aliases": [
                "CVE-2019-10097"
            ],
            "risk_score": 3.0,
            "exploitability": "0.5",
            "weighted_severity": "5.9",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8a5y-wnbc-7yb5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51078?format=api",
            "vulnerability_id": "VCID-9q1t-7c6j-t3dh",
            "summary": "A limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malfomed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed. We have taken this opportunity to also remove request data from many other in-built error messages. Note however this issue did not affect them directly and their output was already escaped to prevent cross-site scripting attacks.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10092.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "4.7",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10092.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10092",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.82379",
                            "scoring_system": "epss",
                            "scoring_elements": "0.99244",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10092"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1743956",
                    "reference_id": "1743956",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1743956"
                },
                {
                    "reference_url": "https://0day.work/proof-of-concept-for-apache-httpd-limited-cross-site-scripting-in-mod_proxy-error-page-cve-2019-10092/",
                    "reference_id": "CVE-2019-10092",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://0day.work/proof-of-concept-for-apache-httpd-limited-cross-site-scripting-in-mod_proxy-error-page-cve-2019-10092/"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/47688.md",
                    "reference_id": "CVE-2019-10092",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/47688.md"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2019-10092.json",
                    "reference_id": "CVE-2019-10092",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "low",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2019-10092.json"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201909-04",
                    "reference_id": "GLSA-201909-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201909-04"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2019:4126",
                    "reference_id": "RHSA-2019:4126",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2019:4126"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:1336",
                    "reference_id": "RHSA-2020:1336",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:1336"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:1337",
                    "reference_id": "RHSA-2020:1337",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:1337"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:4751",
                    "reference_id": "RHSA-2020:4751",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:4751"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/194680?format=api",
                    "purl": "pkg:ebuild/www-servers/apache@2.4.41",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/apache@2.4.41"
                }
            ],
            "aliases": [
                "CVE-2019-10092"
            ],
            "risk_score": 2.1,
            "exploitability": "0.5",
            "weighted_severity": "4.2",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9q1t-7c6j-t3dh"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51076?format=api",
            "vulnerability_id": "VCID-eueu-bt2r-xfaa",
            "summary": "HTTP/2 very early pushes, for example configured with \"H2PushResource\", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client.",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10081.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "5.3",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10081.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10081",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.36106",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97185",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10081"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1743966",
                    "reference_id": "1743966",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1743966"
                },
                {
                    "reference_url": "https://httpd.apache.org/security/json/CVE-2019-10081.json",
                    "reference_id": "CVE-2019-10081",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "moderate",
                            "scoring_system": "apache_httpd",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://httpd.apache.org/security/json/CVE-2019-10081.json"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201909-04",
                    "reference_id": "GLSA-201909-04",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201909-04"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:1336",
                    "reference_id": "RHSA-2020:1336",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:1336"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:1337",
                    "reference_id": "RHSA-2020:1337",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:1337"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2020:4751",
                    "reference_id": "RHSA-2020:4751",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2020:4751"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/194680?format=api",
                    "purl": "pkg:ebuild/www-servers/apache@2.4.41",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/apache@2.4.41"
                }
            ],
            "aliases": [
                "CVE-2019-10081"
            ],
            "risk_score": 2.4,
            "exploitability": "0.5",
            "weighted_severity": "4.8",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-eueu-bt2r-xfaa"
        }
    ],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/apache@2.4.41"
}