Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/openssl@1.0.2i-r0?arch=x86&distroversion=v3.8&reponame=main
Typeapk
Namespacealpine
Nameopenssl
Version1.0.2i-r0
Qualifiers
arch x86
distroversion v3.8
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.0.2m-r0
Latest_non_vulnerable_version1.0.2u-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-fakv-qsaf-vyfp
vulnerability_id VCID-fakv-qsaf-vyfp
summary
Multiple vulnerabilities have been found in OpenSSL, the worst of
    which allows attackers to conduct a time based side-channel attack.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6306.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6306.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6306
reference_id
reference_type
scores
0
value 0.08131
scoring_system epss
scoring_elements 0.92135
published_at 2026-04-01T12:55:00Z
1
value 0.08131
scoring_system epss
scoring_elements 0.92178
published_at 2026-04-16T12:55:00Z
2
value 0.08131
scoring_system epss
scoring_elements 0.92167
published_at 2026-04-09T12:55:00Z
3
value 0.08131
scoring_system epss
scoring_elements 0.92172
published_at 2026-04-12T12:55:00Z
4
value 0.08131
scoring_system epss
scoring_elements 0.92168
published_at 2026-04-13T12:55:00Z
5
value 0.08131
scoring_system epss
scoring_elements 0.92142
published_at 2026-04-02T12:55:00Z
6
value 0.08131
scoring_system epss
scoring_elements 0.92149
published_at 2026-04-04T12:55:00Z
7
value 0.08131
scoring_system epss
scoring_elements 0.92152
published_at 2026-04-07T12:55:00Z
8
value 0.08131
scoring_system epss
scoring_elements 0.92164
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6306
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306
12
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1.9
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:N/C:N/I:N/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1377594
reference_id 1377594
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1377594
14
reference_url https://security.archlinux.org/ASA-201609-23
reference_id ASA-201609-23
reference_type
scores
url https://security.archlinux.org/ASA-201609-23
15
reference_url https://security.archlinux.org/ASA-201609-24
reference_id ASA-201609-24
reference_type
scores
url https://security.archlinux.org/ASA-201609-24
16
reference_url https://security.archlinux.org/AVG-29
reference_id AVG-29
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-29
17
reference_url https://security.archlinux.org/AVG-30
reference_id AVG-30
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-30
18
reference_url https://security.gentoo.org/glsa/201612-16
reference_id GLSA-201612-16
reference_type
scores
url https://security.gentoo.org/glsa/201612-16
19
reference_url https://access.redhat.com/errata/RHSA-2016:1940
reference_id RHSA-2016:1940
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1940
20
reference_url https://access.redhat.com/errata/RHSA-2018:2185
reference_id RHSA-2018:2185
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2185
21
reference_url https://access.redhat.com/errata/RHSA-2018:2186
reference_id RHSA-2018:2186
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2186
22
reference_url https://access.redhat.com/errata/RHSA-2018:2187
reference_id RHSA-2018:2187
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2187
23
reference_url https://usn.ubuntu.com/3087-1/
reference_id USN-3087-1
reference_type
scores
url https://usn.ubuntu.com/3087-1/
fixed_packages
0
url pkg:apk/alpine/openssl@1.0.2i-r0?arch=x86&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/openssl@1.0.2i-r0?arch=x86&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@1.0.2i-r0%3Farch=x86&distroversion=v3.8&reponame=main
aliases CVE-2016-6306
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fakv-qsaf-vyfp
1
url VCID-nsjj-szaq-1kgd
vulnerability_id VCID-nsjj-szaq-1kgd
summary
Multiple vulnerabilities have been found in OpenSSL, the worst of
    which allows attackers to conduct a time based side-channel attack.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6304.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6304.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6304
reference_id
reference_type
scores
0
value 0.18043
scoring_system epss
scoring_elements 0.95133
published_at 2026-04-01T12:55:00Z
1
value 0.18043
scoring_system epss
scoring_elements 0.95177
published_at 2026-04-16T12:55:00Z
2
value 0.18043
scoring_system epss
scoring_elements 0.95165
published_at 2026-04-11T12:55:00Z
3
value 0.18043
scoring_system epss
scoring_elements 0.95166
published_at 2026-04-12T12:55:00Z
4
value 0.18043
scoring_system epss
scoring_elements 0.95169
published_at 2026-04-13T12:55:00Z
5
value 0.18043
scoring_system epss
scoring_elements 0.95144
published_at 2026-04-02T12:55:00Z
6
value 0.18043
scoring_system epss
scoring_elements 0.95145
published_at 2026-04-04T12:55:00Z
7
value 0.18043
scoring_system epss
scoring_elements 0.95148
published_at 2026-04-07T12:55:00Z
8
value 0.18043
scoring_system epss
scoring_elements 0.95155
published_at 2026-04-08T12:55:00Z
9
value 0.18043
scoring_system epss
scoring_elements 0.95159
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6304
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306
12
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:N/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1377600
reference_id 1377600
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1377600
14
reference_url https://security.archlinux.org/ASA-201609-23
reference_id ASA-201609-23
reference_type
scores
url https://security.archlinux.org/ASA-201609-23
15
reference_url https://security.archlinux.org/ASA-201609-24
reference_id ASA-201609-24
reference_type
scores
url https://security.archlinux.org/ASA-201609-24
16
reference_url https://security.archlinux.org/AVG-29
reference_id AVG-29
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-29
17
reference_url https://security.archlinux.org/AVG-30
reference_id AVG-30
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-30
18
reference_url https://security.gentoo.org/glsa/201612-16
reference_id GLSA-201612-16
reference_type
scores
url https://security.gentoo.org/glsa/201612-16
19
reference_url https://access.redhat.com/errata/RHSA-2016:1940
reference_id RHSA-2016:1940
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1940
20
reference_url https://access.redhat.com/errata/RHSA-2016:2802
reference_id RHSA-2016:2802
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2802
21
reference_url https://access.redhat.com/errata/RHSA-2017:1413
reference_id RHSA-2017:1413
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1413
22
reference_url https://access.redhat.com/errata/RHSA-2017:1414
reference_id RHSA-2017:1414
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1414
23
reference_url https://access.redhat.com/errata/RHSA-2017:1415
reference_id RHSA-2017:1415
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1415
24
reference_url https://access.redhat.com/errata/RHSA-2017:1658
reference_id RHSA-2017:1658
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1658
25
reference_url https://access.redhat.com/errata/RHSA-2017:1659
reference_id RHSA-2017:1659
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1659
26
reference_url https://usn.ubuntu.com/3087-1/
reference_id USN-3087-1
reference_type
scores
url https://usn.ubuntu.com/3087-1/
fixed_packages
0
url pkg:apk/alpine/openssl@1.0.2i-r0?arch=x86&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/openssl@1.0.2i-r0?arch=x86&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@1.0.2i-r0%3Farch=x86&distroversion=v3.8&reponame=main
aliases CVE-2016-6304
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nsjj-szaq-1kgd
2
url VCID-x54g-mhs4-mug4
vulnerability_id VCID-x54g-mhs4-mug4
summary
Multiple vulnerabilities have been found in Oracle's JRE and JDK
    software suites, the worst of which may allow execution of arbitrary code
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-2183
reference_id
reference_type
scores
0
value 0.40993
scoring_system epss
scoring_elements 0.97356
published_at 2026-04-01T12:55:00Z
1
value 0.40993
scoring_system epss
scoring_elements 0.97386
published_at 2026-04-16T12:55:00Z
2
value 0.40993
scoring_system epss
scoring_elements 0.97375
published_at 2026-04-09T12:55:00Z
3
value 0.40993
scoring_system epss
scoring_elements 0.97377
published_at 2026-04-11T12:55:00Z
4
value 0.40993
scoring_system epss
scoring_elements 0.97378
published_at 2026-04-13T12:55:00Z
5
value 0.40993
scoring_system epss
scoring_elements 0.97362
published_at 2026-04-02T12:55:00Z
6
value 0.40993
scoring_system epss
scoring_elements 0.97366
published_at 2026-04-04T12:55:00Z
7
value 0.40993
scoring_system epss
scoring_elements 0.97367
published_at 2026-04-07T12:55:00Z
8
value 0.40993
scoring_system epss
scoring_elements 0.97374
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-2183
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1369383
reference_id 1369383
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1369383
4
reference_url https://security.archlinux.org/ASA-201609-23
reference_id ASA-201609-23
reference_type
scores
url https://security.archlinux.org/ASA-201609-23
5
reference_url https://security.archlinux.org/ASA-201609-24
reference_id ASA-201609-24
reference_type
scores
url https://security.archlinux.org/ASA-201609-24
6
reference_url https://security.archlinux.org/AVG-29
reference_id AVG-29
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-29
7
reference_url https://security.archlinux.org/AVG-30
reference_id AVG-30
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-30
8
reference_url https://security.gentoo.org/glsa/201612-16
reference_id GLSA-201612-16
reference_type
scores
url https://security.gentoo.org/glsa/201612-16
9
reference_url https://security.gentoo.org/glsa/201701-65
reference_id GLSA-201701-65
reference_type
scores
url https://security.gentoo.org/glsa/201701-65
10
reference_url https://security.gentoo.org/glsa/201707-01
reference_id GLSA-201707-01
reference_type
scores
url https://security.gentoo.org/glsa/201707-01
11
reference_url https://access.redhat.com/errata/RHSA-2016:1940
reference_id RHSA-2016:1940
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1940
12
reference_url https://access.redhat.com/errata/RHSA-2017:0336
reference_id RHSA-2017:0336
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0336
13
reference_url https://access.redhat.com/errata/RHSA-2017:0337
reference_id RHSA-2017:0337
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0337
14
reference_url https://access.redhat.com/errata/RHSA-2017:0338
reference_id RHSA-2017:0338
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0338
15
reference_url https://access.redhat.com/errata/RHSA-2017:0462
reference_id RHSA-2017:0462
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0462
16
reference_url https://access.redhat.com/errata/RHSA-2017:1216
reference_id RHSA-2017:1216
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1216
17
reference_url https://access.redhat.com/errata/RHSA-2017:2708
reference_id RHSA-2017:2708
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2708
18
reference_url https://access.redhat.com/errata/RHSA-2017:2709
reference_id RHSA-2017:2709
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2709
19
reference_url https://access.redhat.com/errata/RHSA-2017:2710
reference_id RHSA-2017:2710
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2710
20
reference_url https://access.redhat.com/errata/RHSA-2017:3239
reference_id RHSA-2017:3239
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3239
21
reference_url https://access.redhat.com/errata/RHSA-2017:3240
reference_id RHSA-2017:3240
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3240
22
reference_url https://access.redhat.com/errata/RHSA-2018:2123
reference_id RHSA-2018:2123
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2123
23
reference_url https://access.redhat.com/errata/RHSA-2019:1245
reference_id RHSA-2019:1245
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:1245
24
reference_url https://access.redhat.com/errata/RHSA-2019:2859
reference_id RHSA-2019:2859
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2859
25
reference_url https://access.redhat.com/errata/RHSA-2020:0451
reference_id RHSA-2020:0451
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0451
26
reference_url https://access.redhat.com/errata/RHSA-2020:3842
reference_id RHSA-2020:3842
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:3842
27
reference_url https://access.redhat.com/errata/RHSA-2021:0308
reference_id RHSA-2021:0308
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0308
28
reference_url https://access.redhat.com/errata/RHSA-2021:2438
reference_id RHSA-2021:2438
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2438
29
reference_url https://usn.ubuntu.com/3087-1/
reference_id USN-3087-1
reference_type
scores
url https://usn.ubuntu.com/3087-1/
30
reference_url https://usn.ubuntu.com/3179-1/
reference_id USN-3179-1
reference_type
scores
url https://usn.ubuntu.com/3179-1/
31
reference_url https://usn.ubuntu.com/3194-1/
reference_id USN-3194-1
reference_type
scores
url https://usn.ubuntu.com/3194-1/
32
reference_url https://usn.ubuntu.com/3198-1/
reference_id USN-3198-1
reference_type
scores
url https://usn.ubuntu.com/3198-1/
33
reference_url https://usn.ubuntu.com/3270-1/
reference_id USN-3270-1
reference_type
scores
url https://usn.ubuntu.com/3270-1/
34
reference_url https://usn.ubuntu.com/3372-1/
reference_id USN-3372-1
reference_type
scores
url https://usn.ubuntu.com/3372-1/
fixed_packages
0
url pkg:apk/alpine/openssl@1.0.2i-r0?arch=x86&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/openssl@1.0.2i-r0?arch=x86&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@1.0.2i-r0%3Farch=x86&distroversion=v3.8&reponame=main
aliases CVE-2016-2183
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x54g-mhs4-mug4
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssl@1.0.2i-r0%3Farch=x86&distroversion=v3.8&reponame=main