Package Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/25784?format=api",
    "purl": "pkg:pypi/guake@3.1.1",
    "type": "pypi",
    "namespace": "",
    "name": "guake",
    "version": "3.1.1",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": "3.8.5",
    "latest_non_vulnerable_version": "3.8.5",
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8344?format=api",
            "vulnerability_id": "VCID-t1w4-nrhn-yya3",
            "summary": "The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of execute_command and execute_command_by_uuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. **Note:** Exploitation requires the user to have installed another malicious program that will be able to send dbus signals or run terminal commands.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-23556",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00823",
                            "scoring_system": "epss",
                            "scoring_elements": "0.74746",
                            "published_at": "2026-05-30T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-23556"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-7x48-7466-3g33",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/advisories/GHSA-7x48-7466-3g33"
                },
                {
                    "reference_url": "https://github.com/Guake/guake",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/Guake/guake"
                },
                {
                    "reference_url": "https://github.com/Guake/guake/commit/b769b3a5fd71a107c58679d217cccc971b4196b4",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/Guake/guake/commit/b769b3a5fd71a107c58679d217cccc971b4196b4"
                },
                {
                    "reference_url": "https://github.com/Guake/guake/issues/1796",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/Guake/guake/issues/1796"
                },
                {
                    "reference_url": "https://github.com/Guake/guake/pull/2017",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/Guake/guake/pull/2017"
                },
                {
                    "reference_url": "https://github.com/Guake/guake/pull/2017/commits/e3d671120bfe7ba28f50e256cc5e8a629781b888",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/Guake/guake/pull/2017/commits/e3d671120bfe7ba28f50e256cc5e8a629781b888"
                },
                {
                    "reference_url": "https://github.com/Guake/guake/releases",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/Guake/guake/releases"
                },
                {
                    "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/guake/PYSEC-2022-165.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://github.com/pypa/advisory-database/tree/main/vulns/guake/PYSEC-2022-165.yaml"
                },
                {
                    "reference_url": "https://snyk.io/vuln/SNYK-PYTHON-GUAKE-2386334",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://snyk.io/vuln/SNYK-PYTHON-GUAKE-2386334"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23556",
                    "reference_id": "CVE-2021-23556",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23556"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/25806?format=api",
                    "purl": "pkg:pypi/guake@3.8.5",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/guake@3.8.5"
                }
            ],
            "aliases": [
                "CVE-2021-23556",
                "GHSA-7x48-7466-3g33",
                "PYSEC-2022-165",
                "SNYK-PYTHON-GUAKE-2386334"
            ],
            "risk_score": null,
            "exploitability": null,
            "weighted_severity": null,
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-t1w4-nrhn-yya3"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/guake@3.1.1"
}