Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/367458?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/367458?format=api", "purl": "pkg:rpm/redhat/firefox@3.6.23-2?arch=el6_1", "type": "rpm", "namespace": "redhat", "name": "firefox", "version": "3.6.23-2", "qualifiers": { "arch": "el6_1" }, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/182880?format=api", "vulnerability_id": "VCID-3ruv-44ep-2kcx", "summary": "Multiple vulnerabilities have been found in Mozilla Firefox,\n Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may\n allow execution of arbitrary code or local privilege escalation.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2998.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2998.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-2998", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03711", "scoring_system": "epss", "scoring_elements": "0.88234", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.03711", "scoring_system": "epss", "scoring_elements": "0.88274", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.03711", "scoring_system": "epss", "scoring_elements": "0.8828", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.03711", "scoring_system": "epss", "scoring_elements": "0.88279", "published_at": "2026-06-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-2998" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=741924", "reference_id": "741924", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=741924" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2998", "reference_id": "CVE-2011-2998", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2998" }, { "reference_url": "https://security.gentoo.org/glsa/201301-01", "reference_id": "GLSA-201301-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201301-01" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2011-37", "reference_id": "mfsa2011-37", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2011-37" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1341", "reference_id": "RHSA-2011:1341", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1341" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1342", "reference_id": "RHSA-2011:1342", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1342" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1343", "reference_id": "RHSA-2011:1343", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1343" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1344", "reference_id": "RHSA-2011:1344", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1344" } ], "fixed_packages": [], "aliases": [ "CVE-2011-2998" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3ruv-44ep-2kcx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/182881?format=api", "vulnerability_id": "VCID-3utz-sxut-e3cr", "summary": "Multiple vulnerabilities have been found in Mozilla Firefox,\n Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may\n allow execution of arbitrary code or local privilege escalation.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2999.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2999.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-2999", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00722", "scoring_system": "epss", "scoring_elements": "0.7298", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00722", "scoring_system": "epss", "scoring_elements": "0.73057", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00722", "scoring_system": "epss", "scoring_elements": "0.73072", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00722", "scoring_system": "epss", "scoring_elements": "0.7307", "published_at": "2026-06-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-2999" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=741904", "reference_id": "741904", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=741904" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2999", "reference_id": "CVE-2011-2999", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2999" }, { "reference_url": "https://security.gentoo.org/glsa/201301-01", "reference_id": "GLSA-201301-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201301-01" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2011-38", "reference_id": "mfsa2011-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2011-38" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1341", "reference_id": "RHSA-2011:1341", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1341" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1342", "reference_id": "RHSA-2011:1342", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1342" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1343", "reference_id": "RHSA-2011:1343", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1343" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1344", "reference_id": "RHSA-2011:1344", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1344" }, { "reference_url": "https://usn.ubuntu.com/1210-1/", "reference_id": "USN-1210-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1210-1/" }, { "reference_url": "https://usn.ubuntu.com/1213-1/", "reference_id": "USN-1213-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1213-1/" }, { "reference_url": "https://usn.ubuntu.com/1222-1/", "reference_id": "USN-1222-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1222-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2011-2999" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3utz-sxut-e3cr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/182882?format=api", "vulnerability_id": "VCID-46p1-7y1v-qfb7", "summary": "Multiple vulnerabilities have been found in Mozilla Firefox,\n Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may\n allow execution of arbitrary code or local privilege escalation.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3000.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3000.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3000", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01301", "scoring_system": "epss", "scoring_elements": "0.80153", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.01301", "scoring_system": "epss", "scoring_elements": "0.80215", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.01301", "scoring_system": "epss", "scoring_elements": "0.8023", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.01301", "scoring_system": "epss", "scoring_elements": "0.80222", "published_at": "2026-06-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3000" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=741905", "reference_id": "741905", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=741905" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3000", "reference_id": "CVE-2011-3000", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3000" }, { "reference_url": "https://security.gentoo.org/glsa/201301-01", "reference_id": "GLSA-201301-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201301-01" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2011-39", "reference_id": "mfsa2011-39", "reference_type": "", "scores": [ { "value": "none", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2011-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1341", "reference_id": "RHSA-2011:1341", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1341" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1342", "reference_id": "RHSA-2011:1342", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1342" }, { "reference_url": "https://usn.ubuntu.com/1210-1/", "reference_id": "USN-1210-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1210-1/" }, { "reference_url": "https://usn.ubuntu.com/1213-1/", "reference_id": "USN-1213-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1213-1/" }, { "reference_url": "https://usn.ubuntu.com/1222-1/", "reference_id": "USN-1222-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1222-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2011-3000" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-46p1-7y1v-qfb7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/182877?format=api", "vulnerability_id": "VCID-ncgb-5qb6-r7ce", "summary": "Multiple vulnerabilities have been found in Mozilla Firefox,\n Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may\n allow execution of arbitrary code or local privilege escalation.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2995.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2995.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-2995", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0266", "scoring_system": "epss", "scoring_elements": "0.86112", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.0266", "scoring_system": "epss", "scoring_elements": "0.86163", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.0266", "scoring_system": "epss", "scoring_elements": "0.86174", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.0266", "scoring_system": "epss", "scoring_elements": "0.86172", "published_at": "2026-06-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-2995" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=741902", "reference_id": "741902", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=741902" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2995", "reference_id": "CVE-2011-2995", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2995" }, { "reference_url": "https://security.gentoo.org/glsa/201301-01", "reference_id": "GLSA-201301-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201301-01" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2011-36", "reference_id": "mfsa2011-36", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2011-36" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1341", "reference_id": "RHSA-2011:1341", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1341" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1342", "reference_id": "RHSA-2011:1342", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1342" }, { "reference_url": "https://usn.ubuntu.com/1210-1/", "reference_id": "USN-1210-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1210-1/" }, { "reference_url": "https://usn.ubuntu.com/1213-1/", "reference_id": "USN-1213-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1213-1/" }, { "reference_url": "https://usn.ubuntu.com/1222-1/", "reference_id": "USN-1222-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1222-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2011-2995" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ncgb-5qb6-r7ce" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/182855?format=api", "vulnerability_id": "VCID-nx4g-qep4-jugk", "summary": "Multiple vulnerabilities have been found in Mozilla Firefox,\n Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may\n allow execution of arbitrary code or local privilege escalation.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2372.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2372.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-2372", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00429", "scoring_system": "epss", "scoring_elements": "0.62922", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00429", "scoring_system": "epss", "scoring_elements": "0.63023", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00429", "scoring_system": "epss", "scoring_elements": "0.63035", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00429", "scoring_system": "epss", "scoring_elements": "0.63032", "published_at": "2026-06-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-2372" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=741917", "reference_id": "741917", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=741917" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2372", "reference_id": "CVE-2011-2372", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2372" }, { "reference_url": "https://security.gentoo.org/glsa/201301-01", "reference_id": "GLSA-201301-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201301-01" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2011-40", "reference_id": "mfsa2011-40", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2011-40" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1341", "reference_id": "RHSA-2011:1341", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1341" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1342", "reference_id": "RHSA-2011:1342", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1342" }, { "reference_url": "https://usn.ubuntu.com/1210-1/", "reference_id": "USN-1210-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1210-1/" }, { "reference_url": "https://usn.ubuntu.com/1213-1/", "reference_id": "USN-1213-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1213-1/" }, { "reference_url": "https://usn.ubuntu.com/1222-1/", "reference_id": "USN-1222-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1222-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2011-2372" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nx4g-qep4-jugk" } ], "fixing_vulnerabilities": [], "risk_score": "4.5", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@3.6.23-2%3Farch=el6_1" }