Lookup for vulnerable packages by Package URL.

GET /api/packages/352055?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/352055?format=api",
    "purl": "pkg:rpm/redhat/kernel-alt@4.11.0-44.6.1?arch=el7a",
    "type": "rpm",
    "namespace": "redhat",
    "name": "kernel-alt",
    "version": "4.11.0-44.6.1",
    "qualifiers": {
        "arch": "el7a"
    },
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": null,
    "latest_non_vulnerable_version": null,
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3210?format=api",
            "vulnerability_id": "VCID-91we-f3gw-w7eu",
            "summary": "",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17712.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.8",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17712.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-17712",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00076",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22801",
                            "published_at": "2026-06-11T12:55:00Z"
                        },
                        {
                            "value": "0.00076",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22985",
                            "published_at": "2026-06-14T12:55:00Z"
                        },
                        {
                            "value": "0.00076",
                            "scoring_system": "epss",
                            "scoring_elements": "0.23007",
                            "published_at": "2026-06-13T12:55:00Z"
                        },
                        {
                            "value": "0.00076",
                            "scoring_system": "epss",
                            "scoring_elements": "0.22996",
                            "published_at": "2026-06-12T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-17712"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000407",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000407"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000410",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000410"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16538",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16538"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16644",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16644"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16995",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16995"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17448",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17448"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17449",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17449"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17450",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17450"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17558",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17558"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17712",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17712"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17741",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17741"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17805",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17805"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17806",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17806"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17807",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17807"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17862",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17862"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17863",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17863"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17864",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17864"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8824",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8824"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.6",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:M/Au:N/C:P/I:C/A:C"
                        },
                        {
                            "value": "8",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1526427",
                    "reference_id": "1526427",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1526427"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201801-1",
                    "reference_id": "ASA-201801-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201801-1"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201801-2",
                    "reference_id": "ASA-201801-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201801-2"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201801-3",
                    "reference_id": "ASA-201801-3",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201801-3"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201801-4",
                    "reference_id": "ASA-201801-4",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201801-4"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-552",
                    "reference_id": "AVG-552",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-552"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-561",
                    "reference_id": "AVG-561",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-561"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-571",
                    "reference_id": "AVG-571",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-571"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-574",
                    "reference_id": "AVG-574",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-574"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2018:0502",
                    "reference_id": "RHSA-2018:0502",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2018:0502"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3581-3/",
                    "reference_id": "USN-3581-3",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3581-3/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2017-17712"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-91we-f3gw-w7eu"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3155?format=api",
            "vulnerability_id": "VCID-xfd8-rs72-xfha",
            "summary": "",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16994.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.3",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16994.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-16994",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.048",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89728",
                            "published_at": "2026-06-11T12:55:00Z"
                        },
                        {
                            "value": "0.048",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89762",
                            "published_at": "2026-06-12T12:55:00Z"
                        },
                        {
                            "value": "0.048",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89769",
                            "published_at": "2026-06-13T12:55:00Z"
                        },
                        {
                            "value": "0.048",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89767",
                            "published_at": "2026-06-14T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-16994"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16994",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16994"
                },
                {
                    "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "2.1",
                            "scoring_system": "cvssv2",
                            "scoring_elements": "AV:L/AC:L/Au:N/C:P/I:N/A:N"
                        },
                        {
                            "value": "4",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
                        }
                    ],
                    "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1518155",
                    "reference_id": "1518155",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1518155"
                },
                {
                    "reference_url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1431",
                    "reference_id": "CVE-2017-16994",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1431"
                },
                {
                    "reference_url": "https://github.com/hardenedlinux/offensive_poc/blob/99c6b0b540d5550d757315aa0cb8f8edf0c41e2f/CVE-2017-16994/mincore.c",
                    "reference_id": "CVE-2017-16994",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://github.com/hardenedlinux/offensive_poc/blob/99c6b0b540d5550d757315aa0cb8f8edf0c41e2f/CVE-2017-16994/mincore.c"
                },
                {
                    "reference_url": "https://github.com/hardenedlinux/offensive_poc/tree/99c6b0b540d5550d757315aa0cb8f8edf0c41e2f/CVE-2017-5123",
                    "reference_id": "CVE-2017-16994",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://github.com/hardenedlinux/offensive_poc/tree/99c6b0b540d5550d757315aa0cb8f8edf0c41e2f/CVE-2017-5123"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/43178.c",
                    "reference_id": "CVE-2017-16994",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/43178.c"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/44304.c",
                    "reference_id": "CVE-2017-16994",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/44304.c"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/44303.c",
                    "reference_id": "CVE-2017-16994",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/44303.c"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2018:0502",
                    "reference_id": "RHSA-2018:0502",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2018:0502"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3617-1/",
                    "reference_id": "USN-3617-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3617-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3617-2/",
                    "reference_id": "USN-3617-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3617-2/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3617-3/",
                    "reference_id": "USN-3617-3",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3617-3/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3619-1/",
                    "reference_id": "USN-3619-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3619-1/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3619-2/",
                    "reference_id": "USN-3619-2",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3619-2/"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/3632-1/",
                    "reference_id": "USN-3632-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/3632-1/"
                }
            ],
            "fixed_packages": [],
            "aliases": [
                "CVE-2017-16994"
            ],
            "risk_score": 6.0,
            "exploitability": "2.0",
            "weighted_severity": "3.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xfd8-rs72-xfha"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": "6.0",
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/kernel-alt@4.11.0-44.6.1%3Farch=el7a"
}