Lookup for vulnerable packages by Package URL.

GET /api/packages/207028?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/207028?format=api",
    "purl": "pkg:deb/debian/samba@2:4.7.4%2Bdfsg-2?distro=trixie",
    "type": "deb",
    "namespace": "debian",
    "name": "samba",
    "version": "2:4.7.4+dfsg-2",
    "qualifiers": {
        "distro": "trixie"
    },
    "subpath": "",
    "is_vulnerable": false,
    "next_non_vulnerable_version": "0",
    "latest_non_vulnerable_version": "2:4.24.3+dfsg-1",
    "affected_by_vulnerabilities": [],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2173?format=api",
            "vulnerability_id": "VCID-r8gg-dkvg-kbdk",
            "summary": "multiple issues",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1057",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.07722",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92054",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1057"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201803-10",
                    "reference_id": "ASA-201803-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201803-10"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-651",
                    "reference_id": "AVG-651",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Critical",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-651"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201805-07",
                    "reference_id": "GLSA-201805-07",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201805-07"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3595-1/",
                    "reference_id": "USN-3595-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3595-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/207028?format=api",
                    "purl": "pkg:deb/debian/samba@2:4.7.4%2Bdfsg-2?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.7.4%252Bdfsg-2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/206964?format=api",
                    "purl": "pkg:deb/debian/samba@2:4.13.13%2Bdfsg-1~deb11u6?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1nw2-61jc-a7cb"
                        },
                        {
                            "vulnerability": "VCID-2y8a-vvzr-ayb5"
                        },
                        {
                            "vulnerability": "VCID-5fsx-pcbh-byfp"
                        },
                        {
                            "vulnerability": "VCID-85vk-ngb1-57ce"
                        },
                        {
                            "vulnerability": "VCID-9g8x-ryn7-eqd5"
                        },
                        {
                            "vulnerability": "VCID-bayk-215t-rqdc"
                        },
                        {
                            "vulnerability": "VCID-cyhf-e87h-93hm"
                        },
                        {
                            "vulnerability": "VCID-da98-3m1u-qkdt"
                        },
                        {
                            "vulnerability": "VCID-exse-cgag-hbes"
                        },
                        {
                            "vulnerability": "VCID-fkrn-tu6c-ufat"
                        },
                        {
                            "vulnerability": "VCID-fn18-8xsu-dqfx"
                        },
                        {
                            "vulnerability": "VCID-g2hq-f3er-pkew"
                        },
                        {
                            "vulnerability": "VCID-g4uf-3txf-4ucp"
                        },
                        {
                            "vulnerability": "VCID-hxh1-7ut6-fyhz"
                        },
                        {
                            "vulnerability": "VCID-m27d-25sf-gfdx"
                        },
                        {
                            "vulnerability": "VCID-ms7u-gkad-6yb3"
                        },
                        {
                            "vulnerability": "VCID-msme-2zew-2uds"
                        },
                        {
                            "vulnerability": "VCID-nqug-vk7w-zqat"
                        },
                        {
                            "vulnerability": "VCID-qfw1-s5cu-r3d5"
                        },
                        {
                            "vulnerability": "VCID-s3mq-ayra-dfft"
                        },
                        {
                            "vulnerability": "VCID-sbbz-ucq4-h7ba"
                        },
                        {
                            "vulnerability": "VCID-u59c-q6gj-73br"
                        },
                        {
                            "vulnerability": "VCID-yggh-scdy-qfat"
                        },
                        {
                            "vulnerability": "VCID-yhwr-9hfc-cycz"
                        },
                        {
                            "vulnerability": "VCID-ynfd-u4q8-wbck"
                        },
                        {
                            "vulnerability": "VCID-yrhh-e3gs-wkbk"
                        },
                        {
                            "vulnerability": "VCID-zemp-e62x-e7gy"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.13.13%252Bdfsg-1~deb11u6%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/206962?format=api",
                    "purl": "pkg:deb/debian/samba@2:4.17.12%2Bdfsg-0%2Bdeb12u3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.17.12%252Bdfsg-0%252Bdeb12u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/206966?format=api",
                    "purl": "pkg:deb/debian/samba@2:4.22.8%2Bdfsg-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.22.8%252Bdfsg-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/206965?format=api",
                    "purl": "pkg:deb/debian/samba@2:4.24.3%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.24.3%252Bdfsg-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2018-1057"
            ],
            "risk_score": 4.5,
            "exploitability": "0.5",
            "weighted_severity": "9.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-r8gg-dkvg-kbdk"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2174?format=api",
            "vulnerability_id": "VCID-v7n4-5fce-sqfh",
            "summary": "multiple issues",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1050",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.19654",
                            "scoring_system": "epss",
                            "scoring_elements": "0.95529",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1050"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201803-10",
                    "reference_id": "ASA-201803-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201803-10"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-651",
                    "reference_id": "AVG-651",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Critical",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-651"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201805-07",
                    "reference_id": "GLSA-201805-07",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201805-07"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3595-1/",
                    "reference_id": "USN-3595-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3595-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3595-2/",
                    "reference_id": "USN-3595-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3595-2/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/207028?format=api",
                    "purl": "pkg:deb/debian/samba@2:4.7.4%2Bdfsg-2?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.7.4%252Bdfsg-2%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/206964?format=api",
                    "purl": "pkg:deb/debian/samba@2:4.13.13%2Bdfsg-1~deb11u6?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1nw2-61jc-a7cb"
                        },
                        {
                            "vulnerability": "VCID-2y8a-vvzr-ayb5"
                        },
                        {
                            "vulnerability": "VCID-5fsx-pcbh-byfp"
                        },
                        {
                            "vulnerability": "VCID-85vk-ngb1-57ce"
                        },
                        {
                            "vulnerability": "VCID-9g8x-ryn7-eqd5"
                        },
                        {
                            "vulnerability": "VCID-bayk-215t-rqdc"
                        },
                        {
                            "vulnerability": "VCID-cyhf-e87h-93hm"
                        },
                        {
                            "vulnerability": "VCID-da98-3m1u-qkdt"
                        },
                        {
                            "vulnerability": "VCID-exse-cgag-hbes"
                        },
                        {
                            "vulnerability": "VCID-fkrn-tu6c-ufat"
                        },
                        {
                            "vulnerability": "VCID-fn18-8xsu-dqfx"
                        },
                        {
                            "vulnerability": "VCID-g2hq-f3er-pkew"
                        },
                        {
                            "vulnerability": "VCID-g4uf-3txf-4ucp"
                        },
                        {
                            "vulnerability": "VCID-hxh1-7ut6-fyhz"
                        },
                        {
                            "vulnerability": "VCID-m27d-25sf-gfdx"
                        },
                        {
                            "vulnerability": "VCID-ms7u-gkad-6yb3"
                        },
                        {
                            "vulnerability": "VCID-msme-2zew-2uds"
                        },
                        {
                            "vulnerability": "VCID-nqug-vk7w-zqat"
                        },
                        {
                            "vulnerability": "VCID-qfw1-s5cu-r3d5"
                        },
                        {
                            "vulnerability": "VCID-s3mq-ayra-dfft"
                        },
                        {
                            "vulnerability": "VCID-sbbz-ucq4-h7ba"
                        },
                        {
                            "vulnerability": "VCID-u59c-q6gj-73br"
                        },
                        {
                            "vulnerability": "VCID-yggh-scdy-qfat"
                        },
                        {
                            "vulnerability": "VCID-yhwr-9hfc-cycz"
                        },
                        {
                            "vulnerability": "VCID-ynfd-u4q8-wbck"
                        },
                        {
                            "vulnerability": "VCID-yrhh-e3gs-wkbk"
                        },
                        {
                            "vulnerability": "VCID-zemp-e62x-e7gy"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.13.13%252Bdfsg-1~deb11u6%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/206962?format=api",
                    "purl": "pkg:deb/debian/samba@2:4.17.12%2Bdfsg-0%2Bdeb12u3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.17.12%252Bdfsg-0%252Bdeb12u3%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/206966?format=api",
                    "purl": "pkg:deb/debian/samba@2:4.22.8%2Bdfsg-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.22.8%252Bdfsg-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/206965?format=api",
                    "purl": "pkg:deb/debian/samba@2:4.24.3%2Bdfsg-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.24.3%252Bdfsg-1%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2018-1050"
            ],
            "risk_score": 4.5,
            "exploitability": "0.5",
            "weighted_severity": "9.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v7n4-5fce-sqfh"
        }
    ],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.7.4%252Bdfsg-2%3Fdistro=trixie"
}