Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/26815?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/26815?format=api", "purl": "pkg:pypi/nuitka@0.6.9.2", "type": "pypi", "namespace": "", "name": "nuitka", "version": "0.6.9.2", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "0.9", "latest_non_vulnerable_version": "0.9", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8393?format=api", "vulnerability_id": "VCID-23xc-vzxh-xkg3", "summary": "Command Injection in GitHub repository nuitka/nuitka prior to 0.9.", "references": [ { "reference_url": "https://github.com/advisories/GHSA-4v3r-hqr9-69jf", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-4v3r-hqr9-69jf" }, { "reference_url": "https://github.com/nuitka/nuitka/commit/09647745d7cbb6ff32f9fa948f19d5558b32bcad", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/nuitka/nuitka/commit/09647745d7cbb6ff32f9fa948f19d5558b32bcad" }, { "reference_url": "https://huntr.dev/bounties/ea4a842c-c48c-4aae-a599-3305125c63a7", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/ea4a842c-c48c-4aae-a599-3305125c63a7" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/26892?format=api", "purl": "pkg:pypi/nuitka@0.9", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nuitka@0.9" } ], "aliases": [ "CVE-2022-2054", "GHSA-4v3r-hqr9-69jf", "PYSEC-2022-209" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-23xc-vzxh-xkg3" } ], "fixing_vulnerabilities": [], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/nuitka@0.6.9.2" }