Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/25914?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/25914?format=api", "purl": "pkg:pypi/pytorch-lightning@0.2", "type": "pypi", "namespace": "", "name": "pytorch-lightning", "version": "0.2", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "1.6.0", "latest_non_vulnerable_version": "1.6.0", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35937?format=api", "vulnerability_id": "VCID-kpjs-y2wd-kfgf", "summary": "pytorch-lightning is vulnerable to Deserialization of Untrusted Data", "references": [ { "reference_url": "https://github.com/advisories/GHSA-2vj5-px25-gjrp", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-2vj5-px25-gjrp" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/pytorch-lightning/PYSEC-2021-874.yaml", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pytorch-lightning/PYSEC-2021-874.yaml" }, { "reference_url": "https://github.com/pytorchlightning/pytorch-lightning", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pytorchlightning/pytorch-lightning" }, { "reference_url": "https://github.com/pytorchlightning/pytorch-lightning/commit/62f1e82e032eb16565e676d39e0db0cac7e34ace", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pytorchlightning/pytorch-lightning/commit/62f1e82e032eb16565e676d39e0db0cac7e34ace" }, { "reference_url": "https://github.com/PyTorchLightning/pytorch-lightning/issues/11045", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/PyTorchLightning/pytorch-lightning/issues/11045" }, { "reference_url": "https://github.com/PyTorchLightning/pytorch-lightning/pull/11099", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/PyTorchLightning/pytorch-lightning/pull/11099" }, { "reference_url": "https://github.com/PyTorchLightning/pytorch-lightning/releases/tag/1.6.0", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/PyTorchLightning/pytorch-lightning/releases/tag/1.6.0" }, { "reference_url": "https://huntr.dev/bounties/31832f0c-e5bb-4552-a12c-542f81f111e6", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/31832f0c-e5bb-4552-a12c-542f81f111e6" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4118", "reference_id": "CVE-2021-4118", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4118" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/26043?format=api", "purl": "pkg:pypi/pytorch-lightning@1.6.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pytorch-lightning@1.6.0" } ], "aliases": [ "CVE-2021-4118", "GHSA-2vj5-px25-gjrp", "PYSEC-2021-874" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kpjs-y2wd-kfgf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36047?format=api", "vulnerability_id": "VCID-z7cb-qxfa-efa7", "summary": "Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0.", "references": [ { "reference_url": "https://github.com/advisories/GHSA-r5qj-cvf9-p85h", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-r5qj-cvf9-p85h" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/pytorch-lightning/PYSEC-2022-181.yaml", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pytorch-lightning/PYSEC-2022-181.yaml" }, { "reference_url": "https://github.com/pytorchlightning/pytorch-lightning", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pytorchlightning/pytorch-lightning" }, { "reference_url": "https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e9231647839ddb4665e8ae", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e9231647839ddb4665e8ae" }, { "reference_url": "https://github.com/PyTorchLightning/pytorch-lightning/pull/12212", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/PyTorchLightning/pytorch-lightning/pull/12212" }, { "reference_url": "https://huntr.dev/bounties/a795bf93-c91e-4c79-aae8-f7d8bda92e2a", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/a795bf93-c91e-4c79-aae8-f7d8bda92e2a" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0845", "reference_id": "CVE-2022-0845", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0845" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/26043?format=api", "purl": "pkg:pypi/pytorch-lightning@1.6.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pytorch-lightning@1.6.0" } ], "aliases": [ "CVE-2022-0845", "GHSA-r5qj-cvf9-p85h", "PYSEC-2022-181" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z7cb-qxfa-efa7" } ], "fixing_vulnerabilities": [], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pytorch-lightning@0.2" }