Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/198046?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/198046?format=api", "purl": "pkg:deb/debian/musl@1.2.5-3.1~deb13u1?distro=trixie", "type": "deb", "namespace": "debian", "name": "musl", "version": "1.2.5-3.1~deb13u1", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "1.1.4-1", "latest_non_vulnerable_version": "1.2.6-1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/94190?format=api", "vulnerability_id": "VCID-3411-1q27-c7fe", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1817", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00453", "scoring_system": "epss", "scoring_elements": "0.64065", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1817" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781497", "reference_id": "781497", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781497" }, { "reference_url": "https://usn.ubuntu.com/USN-4768-1/", "reference_id": "USN-USN-4768-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/USN-4768-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/198047?format=api", "purl": "pkg:deb/debian/musl@1.1.5-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.1.5-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198044?format=api", "purl": "pkg:deb/debian/musl@1.2.2-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4rax-tybh-tye2" }, { "vulnerability": "VCID-4vec-bd6s-sbg1" }, { "vulnerability": "VCID-c6wy-mrvt-nqgw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.2-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198042?format=api", "purl": "pkg:deb/debian/musl@1.2.3-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4rax-tybh-tye2" }, { "vulnerability": "VCID-4vec-bd6s-sbg1" }, { "vulnerability": "VCID-c6wy-mrvt-nqgw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.3-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198046?format=api", "purl": "pkg:deb/debian/musl@1.2.5-3.1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.5-3.1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198045?format=api", "purl": "pkg:deb/debian/musl@1.2.6-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.6-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2015-1817" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3411-1q27-c7fe" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/337255?format=api", "vulnerability_id": "VCID-4rax-tybh-tye2", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-6042.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-6042.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-6042", "reference_id": "", "reference_type": "", "scores": [ { "value": "7e-05", "scoring_system": "epss", "scoring_elements": "0.00498", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-6042" }, { "reference_url": "https://www.openwall.com/lists/oss-security/2026/04/02/10", "reference_id": "10", "reference_type": "", "scores": [ { "value": "1.7", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:ND/RL:OF/RC:C" }, { "value": "3.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C" }, { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-10T15:44:05Z/" } ], "url": "https://www.openwall.com/lists/oss-security/2026/04/02/10" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1133372", "reference_id": "1133372", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1133372" }, { "reference_url": "https://www.openwall.com/lists/oss-security/2026/04/03/2", "reference_id": "2", "reference_type": "", "scores": [ { "value": "1.7", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:ND/RL:OF/RC:C" }, { "value": "3.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C" }, { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-10T15:44:05Z/" } ], "url": "https://www.openwall.com/lists/oss-security/2026/04/03/2" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457266", "reference_id": "2457266", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457266" }, { "reference_url": "https://vuldb.com/vuln/356620", "reference_id": "356620", "reference_type": "", "scores": [ { "value": "1.7", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:ND/RL:OF/RC:C" }, { "value": "3.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C" }, { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-10T15:44:05Z/" } ], "url": "https://vuldb.com/vuln/356620" }, { "reference_url": "https://vuldb.com/submit/796352", "reference_id": "796352", "reference_type": "", "scores": [ { "value": "1.7", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:ND/RL:OF/RC:C" }, { "value": "3.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C" }, { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-10T15:44:05Z/" } ], "url": "https://vuldb.com/submit/796352" }, { "reference_url": "https://vuldb.com/vuln/356620/cti", "reference_id": "cti", "reference_type": "", "scores": [ { "value": "1.7", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:ND/RL:OF/RC:C" }, { "value": "3.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C" }, { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-10T15:44:05Z/" } ], "url": "https://vuldb.com/vuln/356620/cti" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/198046?format=api", "purl": "pkg:deb/debian/musl@1.2.5-3.1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.5-3.1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198055?format=api", "purl": "pkg:deb/debian/musl@1.2.5-3.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.5-3.1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198045?format=api", "purl": "pkg:deb/debian/musl@1.2.6-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.6-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-6042" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4rax-tybh-tye2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/289359?format=api", "vulnerability_id": "VCID-4vec-bd6s-sbg1", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26519", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.1058", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26519" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098238", "reference_id": "1098238", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098238" }, { "reference_url": "https://www.openwall.com/lists/oss-security/2025/02/13/2", "reference_id": "2", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-14T15:55:49Z/" } ], "url": "https://www.openwall.com/lists/oss-security/2025/02/13/2" }, { "reference_url": "https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da", "reference_id": "?id=c47ad25ea3b484e10326f933e927c0bc8cded3da", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-14T15:55:49Z/" } ], "url": "https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da" }, { "reference_url": "https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659", "reference_id": "?id=e5adcd97b5196e29991b524237381a0202a60659", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-14T15:55:49Z/" } ], "url": "https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/198054?format=api", "purl": "pkg:deb/debian/musl@1.2.5-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.5-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198046?format=api", "purl": "pkg:deb/debian/musl@1.2.5-3.1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.5-3.1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198045?format=api", "purl": "pkg:deb/debian/musl@1.2.6-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.6-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-26519" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4vec-bd6s-sbg1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/139511?format=api", "vulnerability_id": "VCID-8enm-2jkt-9bg7", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-14697", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00681", "scoring_system": "epss", "scoring_elements": "0.71945", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-14697" }, { "reference_url": "https://security.gentoo.org/glsa/202003-13", "reference_id": "GLSA-202003-13", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202003-13" }, { "reference_url": "https://usn.ubuntu.com/5990-1/", "reference_id": "USN-5990-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5990-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/198053?format=api", "purl": "pkg:deb/debian/musl@1.1.23-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.1.23-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198044?format=api", "purl": "pkg:deb/debian/musl@1.2.2-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4rax-tybh-tye2" }, { "vulnerability": "VCID-4vec-bd6s-sbg1" }, { "vulnerability": "VCID-c6wy-mrvt-nqgw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.2-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198042?format=api", "purl": "pkg:deb/debian/musl@1.2.3-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4rax-tybh-tye2" }, { "vulnerability": "VCID-4vec-bd6s-sbg1" }, { "vulnerability": "VCID-c6wy-mrvt-nqgw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.3-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198046?format=api", "purl": "pkg:deb/debian/musl@1.2.5-3.1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.5-3.1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198045?format=api", "purl": "pkg:deb/debian/musl@1.2.6-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.6-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2019-14697" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8enm-2jkt-9bg7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/107745?format=api", "vulnerability_id": "VCID-936h-zzeu-1fbx", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8859", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00762", "scoring_system": "epss", "scoring_elements": "0.73672", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8859" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842169", "reference_id": "842169", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842169" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842171", "reference_id": "842171", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842171" }, { "reference_url": "https://security.gentoo.org/glsa/201701-11", "reference_id": "GLSA-201701-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201701-11" }, { "reference_url": "https://security.gentoo.org/glsa/202007-43", "reference_id": "GLSA-202007-43", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202007-43" }, { "reference_url": "https://usn.ubuntu.com/USN-4768-1/", "reference_id": "USN-USN-4768-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/USN-4768-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/198050?format=api", "purl": "pkg:deb/debian/musl@1.1.15-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.1.15-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198044?format=api", "purl": "pkg:deb/debian/musl@1.2.2-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4rax-tybh-tye2" }, { "vulnerability": "VCID-4vec-bd6s-sbg1" }, { "vulnerability": "VCID-c6wy-mrvt-nqgw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.2-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198042?format=api", "purl": "pkg:deb/debian/musl@1.2.3-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4rax-tybh-tye2" }, { "vulnerability": "VCID-4vec-bd6s-sbg1" }, { "vulnerability": "VCID-c6wy-mrvt-nqgw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.3-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198046?format=api", "purl": "pkg:deb/debian/musl@1.2.5-3.1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.5-3.1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198045?format=api", "purl": "pkg:deb/debian/musl@1.2.6-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.6-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2016-8859" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-936h-zzeu-1fbx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/331927?format=api", "vulnerability_id": "VCID-c6wy-mrvt-nqgw", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-40200.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-40200.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-40200", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.0585", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-40200" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1133372", "reference_id": "1133372", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1133372" }, { "reference_url": "https://www.openwall.com/lists/oss-security/2026/04/10/13", "reference_id": "13", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-14T14:31:53Z/" } ], "url": "https://www.openwall.com/lists/oss-security/2026/04/10/13" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457369", "reference_id": "2457369", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457369" }, { "reference_url": "https://musl.libc.org/releases.html", "reference_id": "releases.html", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-14T14:31:53Z/" } ], "url": "https://musl.libc.org/releases.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/198046?format=api", "purl": "pkg:deb/debian/musl@1.2.5-3.1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.5-3.1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198055?format=api", "purl": "pkg:deb/debian/musl@1.2.5-3.1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.5-3.1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198045?format=api", "purl": "pkg:deb/debian/musl@1.2.6-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.6-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-40200" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c6wy-mrvt-nqgw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5978?format=api", "vulnerability_id": "VCID-ukk6-et3u-r7d4", "summary": "arbitrary code execution", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28928", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00041", "scoring_system": "epss", "scoring_elements": "0.12756", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28928" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975365", "reference_id": "975365", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975365" }, { "reference_url": "https://security.archlinux.org/ASA-202011-29", "reference_id": "ASA-202011-29", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202011-29" }, { "reference_url": "https://security.archlinux.org/AVG-1287", "reference_id": "AVG-1287", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1287" }, { "reference_url": "https://usn.ubuntu.com/5990-1/", "reference_id": "USN-5990-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5990-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/198044?format=api", "purl": "pkg:deb/debian/musl@1.2.2-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4rax-tybh-tye2" }, { "vulnerability": "VCID-4vec-bd6s-sbg1" }, { "vulnerability": "VCID-c6wy-mrvt-nqgw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.2-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198042?format=api", "purl": "pkg:deb/debian/musl@1.2.3-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4rax-tybh-tye2" }, { "vulnerability": "VCID-4vec-bd6s-sbg1" }, { "vulnerability": "VCID-c6wy-mrvt-nqgw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.3-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198046?format=api", "purl": "pkg:deb/debian/musl@1.2.5-3.1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.5-3.1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198045?format=api", "purl": "pkg:deb/debian/musl@1.2.6-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.6-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2020-28928" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ukk6-et3u-r7d4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2243?format=api", "vulnerability_id": "VCID-x1hy-tatq-x7b9", "summary": "arbitrary code execution", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-15650", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00676", "scoring_system": "epss", "scoring_elements": "0.71827", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-15650" }, { "reference_url": "https://security.archlinux.org/ASA-201710-28", "reference_id": "ASA-201710-28", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201710-28" }, { "reference_url": "https://security.archlinux.org/AVG-457", "reference_id": "AVG-457", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-457" }, { "reference_url": "https://usn.ubuntu.com/USN-4768-1/", "reference_id": "USN-USN-4768-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/USN-4768-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/198052?format=api", "purl": "pkg:deb/debian/musl@1.1.17-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.1.17-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198044?format=api", "purl": "pkg:deb/debian/musl@1.2.2-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4rax-tybh-tye2" }, { "vulnerability": "VCID-4vec-bd6s-sbg1" }, { "vulnerability": "VCID-c6wy-mrvt-nqgw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.2-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198042?format=api", "purl": "pkg:deb/debian/musl@1.2.3-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4rax-tybh-tye2" }, { "vulnerability": "VCID-4vec-bd6s-sbg1" }, { "vulnerability": "VCID-c6wy-mrvt-nqgw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.3-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198046?format=api", "purl": "pkg:deb/debian/musl@1.2.5-3.1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.5-3.1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198045?format=api", "purl": "pkg:deb/debian/musl@1.2.6-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.6-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2017-15650" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x1hy-tatq-x7b9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/87320?format=api", "vulnerability_id": "VCID-zhz7-j1fn-dkas", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3484", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01446", "scoring_system": "epss", "scoring_elements": "0.81067", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3484" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750815", "reference_id": "750815", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750815" }, { "reference_url": "https://usn.ubuntu.com/USN-4768-1/", "reference_id": "USN-USN-4768-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/USN-4768-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/198043?format=api", "purl": "pkg:deb/debian/musl@1.1.4-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.1.4-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198044?format=api", "purl": "pkg:deb/debian/musl@1.2.2-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4rax-tybh-tye2" }, { "vulnerability": "VCID-4vec-bd6s-sbg1" }, { "vulnerability": "VCID-c6wy-mrvt-nqgw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.2-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198042?format=api", "purl": "pkg:deb/debian/musl@1.2.3-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4rax-tybh-tye2" }, { "vulnerability": "VCID-4vec-bd6s-sbg1" }, { "vulnerability": "VCID-c6wy-mrvt-nqgw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.3-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198046?format=api", "purl": "pkg:deb/debian/musl@1.2.5-3.1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.5-3.1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/198045?format=api", "purl": "pkg:deb/debian/musl@1.2.6-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.6-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2014-3484" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zhz7-j1fn-dkas" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/musl@1.2.5-3.1~deb13u1%3Fdistro=trixie" }