Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/21278?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/21278?format=api", "purl": "pkg:gem/nokogiri@1.6.7.rc1", "type": "gem", "namespace": "", "name": "nokogiri", "version": "1.6.7.rc1", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "1.19.1", "latest_non_vulnerable_version": "1.19.1", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7207?format=api", "vulnerability_id": "VCID-v226-z8ay-sue4", "summary": "Unsafe parsing of unclosed comments\nParsing an unclosed comment can result in `Conditional jump or move depends on uninitialised value(s)` and unsafe memory access.", "references": [ { "reference_url": "https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.rdoc#167rc4--2015-11-22", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.rdoc#167rc4--2015-11-22" }, { "reference_url": "https://github.com/sparklemotion/nokogiri/blob/v1.6.6.x/CHANGELOG.rdoc#1664--2015-11-19", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/sparklemotion/nokogiri/blob/v1.6.6.x/CHANGELOG.rdoc#1664--2015-11-19" }, { "reference_url": "https://github.com/sparklemotion/nokogiri/commit/0948e9fa38c949661983a33752fdcb94a453e272", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/sparklemotion/nokogiri/commit/0948e9fa38c949661983a33752fdcb94a453e272" }, { "reference_url": "https://github.com/sparklemotion/nokogiri/commit/3ab1b2339f7bb3a00590c8d288a24a9dbfe5aec4", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/sparklemotion/nokogiri/commit/3ab1b2339f7bb3a00590c8d288a24a9dbfe5aec4" }, { "reference_url": "https://groups.google.com/forum/#!topic/nokogiri-talk/nFl0mfcJpbk", "reference_id": "", "reference_type": "", "scores": [], "url": "https://groups.google.com/forum/#!topic/nokogiri-talk/nFl0mfcJpbk" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/21189?format=api", "purl": "pkg:gem/nokogiri@1.6.7.rc4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-22km-jmtd-yyde" }, { "vulnerability": "VCID-2b1g-gp84-87e8" }, { "vulnerability": "VCID-2j62-5rjn-vyeu" }, { "vulnerability": "VCID-365e-j8ta-h7cn" }, { "vulnerability": "VCID-3f2w-tgya-x3cc" }, { "vulnerability": "VCID-43qu-922g-myca" }, { "vulnerability": "VCID-64c1-dzhs-u3gj" }, { "vulnerability": "VCID-64ca-973e-nfgm" }, { "vulnerability": "VCID-6r5w-pgkx-v3cb" }, { "vulnerability": "VCID-7bpp-2hvk-2udv" }, { "vulnerability": "VCID-8geh-vfns-pfgs" }, { "vulnerability": "VCID-96v6-vs1m-skf3" }, { "vulnerability": "VCID-9hqf-12yh-bkc8" }, { "vulnerability": "VCID-9p2f-ynzb-r3gj" }, { "vulnerability": "VCID-9wgc-swf9-z7hq" }, { "vulnerability": "VCID-azzy-m5pc-qudn" }, { "vulnerability": "VCID-bejh-22y7-kuh6" }, { "vulnerability": "VCID-c6hb-sbhx-zqac" }, { "vulnerability": "VCID-cbm2-cez4-bqgh" }, { "vulnerability": "VCID-eb6k-ppfd-m7a3" }, { "vulnerability": "VCID-ecde-c15q-ukh1" }, { "vulnerability": "VCID-ek5d-m9pn-3fec" }, { "vulnerability": "VCID-ghbk-uumc-dug3" }, { "vulnerability": "VCID-gsar-pymk-43hs" }, { "vulnerability": "VCID-hzjv-gf8n-jka2" }, { "vulnerability": "VCID-jfh3-1sgm-7ug2" }, { "vulnerability": "VCID-jqdg-ebz9-t3e9" }, { "vulnerability": "VCID-m7km-hbm9-23h4" }, { "vulnerability": "VCID-n6za-rwad-tbaq" }, { "vulnerability": "VCID-nq12-ryyt-c7g9" }, { "vulnerability": "VCID-q732-nexj-1ue6" }, { "vulnerability": "VCID-qv3r-ppuc-zycz" }, { "vulnerability": "VCID-rsvx-3f49-v3an" }, { "vulnerability": "VCID-snr1-kaug-43aa" }, { "vulnerability": "VCID-sqa5-8yrd-qyfz" }, { "vulnerability": "VCID-sxp3-vtcq-pugw" }, { "vulnerability": "VCID-tdt5-asvh-ryaa" }, { "vulnerability": "VCID-tn87-vke6-kuf6" }, { "vulnerability": "VCID-txm2-sdc1-7uch" }, { "vulnerability": "VCID-u8gx-xbj9-97c7" }, { "vulnerability": "VCID-udew-3gre-13hy" }, { "vulnerability": "VCID-uf9q-1ds5-wbev" }, { "vulnerability": "VCID-vf7b-s3y3-sfhw" }, { "vulnerability": "VCID-vhyk-9tbb-quc3" }, { "vulnerability": "VCID-w8jf-tsmr-g7cd" }, { "vulnerability": "VCID-wc4g-sxyq-ubcd" }, { "vulnerability": "VCID-xd6j-x83x-r3gn" }, { "vulnerability": "VCID-y5vb-sn4p-eqd9" }, { "vulnerability": "VCID-yeku-1zjh-kbea" }, { "vulnerability": "VCID-zwzs-qztz-wbfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:gem/nokogiri@1.6.7.rc4" } ], "aliases": [ "GMS-2015-43" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v226-z8ay-sue4" } ], "fixing_vulnerabilities": [], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:gem/nokogiri@1.6.7.rc1" }