Package Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/215651?format=api",
    "purl": "pkg:npm/redis-commander@0.3.0",
    "type": "npm",
    "namespace": "",
    "name": "redis-commander",
    "version": "0.3.0",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": "0.5.0",
    "latest_non_vulnerable_version": "0.5.0",
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39337?format=api",
            "vulnerability_id": "VCID-d5jf-zmr7-qqbu",
            "summary": "Reflected Cross-Site Scripting\nMalicious input in the `highlighterId` parameter of the `clipboard.swf` component can be leveraged in a reflected XSS on hosts serving Redis Commander. Mitigating factors: Flash must be installed/enabled for this to work.",
            "references": [
                {
                    "reference_url": "https://hackerone.com/reports/296377",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://hackerone.com/reports/296377"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "GMS-2018-8"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d5jf-zmr7-qqbu"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/52996?format=api",
            "vulnerability_id": "VCID-mf4c-4qpa-tuat",
            "summary": "Reflected Cross-Site Scripting in redis-commander\nAffected versions of `redis-commander` contain a cross-site scripting vulnerability in the `highlighterId` paramter of the `clipboard.swf` component on hosts serving Redis Commander.",
            "references": [
                {
                    "reference_url": "https://github.com/joeferner/redis-commander",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/joeferner/redis-commander"
                },
                {
                    "reference_url": "https://github.com/joeferner/redis-commander/commit/1a483ebb3a706cf199dd283cf0aead96606adb14",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/joeferner/redis-commander/commit/1a483ebb3a706cf199dd283cf0aead96606adb14"
                },
                {
                    "reference_url": "https://github.com/joeferner/redis-commander/releases/tag/v0.5.0",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/joeferner/redis-commander/releases/tag/v0.5.0"
                },
                {
                    "reference_url": "https://hackerone.com/reports/296377",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://hackerone.com/reports/296377"
                },
                {
                    "reference_url": "https://www.npmjs.com/advisories/562",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://www.npmjs.com/advisories/562"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-8c8c-4vfj-rrpc",
                    "reference_id": "GHSA-8c8c-4vfj-rrpc",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "LOW",
                            "scoring_system": "cvssv3.1_qr",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/advisories/GHSA-8c8c-4vfj-rrpc"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/77974?format=api",
                    "purl": "pkg:npm/redis-commander@0.5.0",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/redis-commander@0.5.0"
                }
            ],
            "aliases": [
                "GHSA-8c8c-4vfj-rrpc",
                "GMS-2020-764"
            ],
            "risk_score": 1.4,
            "exploitability": "0.5",
            "weighted_severity": "2.7",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mf4c-4qpa-tuat"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": "1.4",
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/redis-commander@0.3.0"
}