Lookup for vulnerable packages by Package URL.

GET /api/packages/4525?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/4525?format=api",
    "purl": "pkg:deb/debian/glibc@2.19-18%2Bdeb8u9",
    "type": "deb",
    "namespace": "debian",
    "name": "glibc",
    "version": "2.19-18+deb8u9",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": "2.28-10",
    "latest_non_vulnerable_version": "2.36-8",
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6039?format=api",
            "vulnerability_id": "VCID-3nek-jk2f-1qde",
            "summary": "information disclosure",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9169.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.5",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9169.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9169",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.04945",
                            "scoring_system": "epss",
                            "scoring_elements": "0.89814",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9169"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9169",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9169"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1684057",
                    "reference_id": "1684057",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1684057"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924612",
                    "reference_id": "924612",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924612"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201911-3",
                    "reference_id": "ASA-201911-3",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201911-3"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-855",
                    "reference_id": "AVG-855",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-855"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2021:1585",
                    "reference_id": "RHSA-2021:1585",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2021:1585"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/6392?format=api",
                    "purl": "pkg:deb/debian/glibc@2.28-10",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/glibc@2.28-10"
                }
            ],
            "aliases": [
                "CVE-2019-9169"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3nek-jk2f-1qde"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6345?format=api",
            "vulnerability_id": "VCID-5w3m-fa4f-qfda",
            "summary": "privilege escalation",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000001.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000001.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1000001",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.41417",
                            "scoring_system": "epss",
                            "scoring_elements": "0.97479",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1000001"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000001",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000001"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1533836",
                    "reference_id": "1533836",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1533836"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887001",
                    "reference_id": "887001",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887001"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201801-18",
                    "reference_id": "ASA-201801-18",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201801-18"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201801-19",
                    "reference_id": "ASA-201801-19",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201801-19"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-590",
                    "reference_id": "AVG-590",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-590"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/43775.c",
                    "reference_id": "CVE-2018-1000001",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/43775.c"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/44889.rb",
                    "reference_id": "CVE-2018-1000001",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/44889.rb"
                },
                {
                    "reference_url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/29f4870fa0f916e31300d1bc78aeabeb297c667f/modules/exploits/linux/local/glibc_realpath_priv_esc.rb",
                    "reference_id": "CVE-2018-1000001",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/29f4870fa0f916e31300d1bc78aeabeb297c667f/modules/exploits/linux/local/glibc_realpath_priv_esc.rb"
                },
                {
                    "reference_url": "https://www.halfdog.net/Security/2017/LibcRealpathBufferUnderflow/RationalLove.c",
                    "reference_id": "CVE-2018-1000001",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://www.halfdog.net/Security/2017/LibcRealpathBufferUnderflow/RationalLove.c"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201804-02",
                    "reference_id": "GLSA-201804-02",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201804-02"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2018:0805",
                    "reference_id": "RHSA-2018:0805",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2018:0805"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5638?format=api",
                    "purl": "pkg:deb/debian/glibc@2.28-7",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3nek-jk2f-1qde"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/glibc@2.28-7"
                }
            ],
            "aliases": [
                "CVE-2018-1000001"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5w3m-fa4f-qfda"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/4409?format=api",
            "vulnerability_id": "VCID-7nbj-u4gt-27g8",
            "summary": "multiple issues",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12132.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12132.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-12132",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00602",
                            "scoring_system": "epss",
                            "scoring_elements": "0.69908",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-12132"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12132",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12132"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1477529",
                    "reference_id": "1477529",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1477529"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870650",
                    "reference_id": "870650",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870650"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-368",
                    "reference_id": "AVG-368",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Critical",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-368"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-369",
                    "reference_id": "AVG-369",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Critical",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-369"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2018:0805",
                    "reference_id": "RHSA-2018:0805",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2018:0805"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5638?format=api",
                    "purl": "pkg:deb/debian/glibc@2.28-7",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3nek-jk2f-1qde"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/glibc@2.28-7"
                }
            ],
            "aliases": [
                "CVE-2017-12132"
            ],
            "risk_score": 4.5,
            "exploitability": "0.5",
            "weighted_severity": "9.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7nbj-u4gt-27g8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6541?format=api",
            "vulnerability_id": "VCID-7w8v-q4ar-6ye1",
            "summary": "privilege escalation",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000366.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.4",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000366.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000366",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.08874",
                            "scoring_system": "epss",
                            "scoring_elements": "0.92704",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-1000366"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000366",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000366"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1452543",
                    "reference_id": "1452543",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1452543"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201706-22",
                    "reference_id": "ASA-201706-22",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201706-22"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201706-23",
                    "reference_id": "ASA-201706-23",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201706-23"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-307",
                    "reference_id": "AVG-307",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-307"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-308",
                    "reference_id": "AVG-308",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-308"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux_x86/local/42274.c",
                    "reference_id": "CVE-2017-1000370;CVE-2017-1000366",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux_x86/local/42274.c"
                },
                {
                    "reference_url": "https://www.qualys.com/2017/06/19/stack-clash/linux_ldso_hwcap.c",
                    "reference_id": "CVE-2017-1000370;CVE-2017-1000366",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://www.qualys.com/2017/06/19/stack-clash/linux_ldso_hwcap.c"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux_x86/local/42276.c",
                    "reference_id": "CVE-2017-1000371;CVE-2017-1000366",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux_x86/local/42276.c"
                },
                {
                    "reference_url": "https://www.qualys.com/2017/06/19/stack-clash/linux_ldso_dynamic.c",
                    "reference_id": "CVE-2017-1000371;CVE-2017-1000366",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://www.qualys.com/2017/06/19/stack-clash/linux_ldso_dynamic.c"
                },
                {
                    "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux_x86-64/local/42275.c",
                    "reference_id": "CVE-2017-1000379;CVE-2017-1000366",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux_x86-64/local/42275.c"
                },
                {
                    "reference_url": "https://www.qualys.com/2017/06/19/stack-clash/linux_ldso_hwcap_64.c",
                    "reference_id": "CVE-2017-1000379;CVE-2017-1000366",
                    "reference_type": "exploit",
                    "scores": [],
                    "url": "https://www.qualys.com/2017/06/19/stack-clash/linux_ldso_hwcap_64.c"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201706-19",
                    "reference_id": "GLSA-201706-19",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201706-19"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:1479",
                    "reference_id": "RHSA-2017:1479",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:1479"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:1480",
                    "reference_id": "RHSA-2017:1480",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:1480"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:1481",
                    "reference_id": "RHSA-2017:1481",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:1481"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2017:1567",
                    "reference_id": "RHSA-2017:1567",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2017:1567"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/4526?format=api",
                    "purl": "pkg:deb/debian/glibc@2.19-18%2Bdeb8u10",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3nek-jk2f-1qde"
                        },
                        {
                            "vulnerability": "VCID-5w3m-fa4f-qfda"
                        },
                        {
                            "vulnerability": "VCID-7nbj-u4gt-27g8"
                        },
                        {
                            "vulnerability": "VCID-7w8v-q4ar-6ye1"
                        },
                        {
                            "vulnerability": "VCID-84mp-fxcw-hkb4"
                        },
                        {
                            "vulnerability": "VCID-mktr-7p6g-3kfz"
                        },
                        {
                            "vulnerability": "VCID-z5ef-c4zf-9ybe"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/glibc@2.19-18%252Bdeb8u10"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/4822?format=api",
                    "purl": "pkg:deb/debian/glibc@2.24-11%2Bdeb9u3",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3nek-jk2f-1qde"
                        },
                        {
                            "vulnerability": "VCID-5w3m-fa4f-qfda"
                        },
                        {
                            "vulnerability": "VCID-7nbj-u4gt-27g8"
                        },
                        {
                            "vulnerability": "VCID-7w8v-q4ar-6ye1"
                        },
                        {
                            "vulnerability": "VCID-84mp-fxcw-hkb4"
                        },
                        {
                            "vulnerability": "VCID-mktr-7p6g-3kfz"
                        },
                        {
                            "vulnerability": "VCID-z5ef-c4zf-9ybe"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/glibc@2.24-11%252Bdeb9u3"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5638?format=api",
                    "purl": "pkg:deb/debian/glibc@2.28-7",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3nek-jk2f-1qde"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/glibc@2.28-7"
                }
            ],
            "aliases": [
                "CVE-2017-1000366"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7w8v-q4ar-6ye1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6437?format=api",
            "vulnerability_id": "VCID-84mp-fxcw-hkb4",
            "summary": "multiple issues",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15671.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.3",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15671.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-15671",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00231",
                            "scoring_system": "epss",
                            "scoring_elements": "0.45968",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-15671"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15671",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15671"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1504806",
                    "reference_id": "1504806",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1504806"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879500",
                    "reference_id": "879500",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879500"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201801-8",
                    "reference_id": "ASA-201801-8",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201801-8"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201801-9",
                    "reference_id": "ASA-201801-9",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201801-9"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-460",
                    "reference_id": "AVG-460",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-460"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201804-02",
                    "reference_id": "GLSA-201804-02",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201804-02"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5638?format=api",
                    "purl": "pkg:deb/debian/glibc@2.28-7",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3nek-jk2f-1qde"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/glibc@2.28-7"
                }
            ],
            "aliases": [
                "CVE-2017-15671"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-84mp-fxcw-hkb4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6438?format=api",
            "vulnerability_id": "VCID-mktr-7p6g-3kfz",
            "summary": "multiple issues",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15670.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "7.0",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15670.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-15670",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00218",
                            "scoring_system": "epss",
                            "scoring_elements": "0.44325",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-15670"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15670",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15670"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1504804",
                    "reference_id": "1504804",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1504804"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879501",
                    "reference_id": "879501",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879501"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201801-8",
                    "reference_id": "ASA-201801-8",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201801-8"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201801-9",
                    "reference_id": "ASA-201801-9",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201801-9"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-460",
                    "reference_id": "AVG-460",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-460"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/201804-02",
                    "reference_id": "GLSA-201804-02",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/201804-02"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2018:0805",
                    "reference_id": "RHSA-2018:0805",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2018:0805"
                },
                {
                    "reference_url": "https://access.redhat.com/errata/RHSA-2018:1879",
                    "reference_id": "RHSA-2018:1879",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://access.redhat.com/errata/RHSA-2018:1879"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5638?format=api",
                    "purl": "pkg:deb/debian/glibc@2.28-7",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3nek-jk2f-1qde"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/glibc@2.28-7"
                }
            ],
            "aliases": [
                "CVE-2017-15670"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mktr-7p6g-3kfz"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/4408?format=api",
            "vulnerability_id": "VCID-z5ef-c4zf-9ybe",
            "summary": "multiple issues",
            "references": [
                {
                    "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12133.json",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "3.7",
                            "scoring_system": "cvssv3",
                            "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
                        }
                    ],
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12133.json"
                },
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-12133",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00474",
                            "scoring_system": "epss",
                            "scoring_elements": "0.65102",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-12133"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12133",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12133"
                },
                {
                    "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1478288",
                    "reference_id": "1478288",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1478288"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870648",
                    "reference_id": "870648",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870648"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-368",
                    "reference_id": "AVG-368",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Critical",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-368"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-369",
                    "reference_id": "AVG-369",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Critical",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-369"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5638?format=api",
                    "purl": "pkg:deb/debian/glibc@2.28-7",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-3nek-jk2f-1qde"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/glibc@2.28-7"
                }
            ],
            "aliases": [
                "CVE-2017-12133"
            ],
            "risk_score": 4.5,
            "exploitability": "0.5",
            "weighted_severity": "9.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z5ef-c4zf-9ybe"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": "4.5",
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/glibc@2.19-18%252Bdeb8u9"
}