Lookup for vulnerable packages by Package URL.

GET /api/packages/4931?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/4931?format=api",
    "purl": "pkg:deb/debian/tor@0.2.9.14-1~bpo8%2B1",
    "type": "deb",
    "namespace": "debian",
    "name": "tor",
    "version": "0.2.9.14-1~bpo8+1",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": "0.3.5.16-1",
    "latest_non_vulnerable_version": "0.3.5.16-1",
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7300?format=api",
            "vulnerability_id": "VCID-33xt-scs6-wkbd",
            "summary": "denial of service",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-34549",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00642",
                            "scoring_system": "epss",
                            "scoring_elements": "0.70993",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-34549"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34548",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34548"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34549",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34549"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34550",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34550"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990000",
                    "reference_id": "990000",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990000"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-202106-50",
                    "reference_id": "ASA-202106-50",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-202106-50"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-2075",
                    "reference_id": "AVG-2075",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Medium",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-2075"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202107-25",
                    "reference_id": "GLSA-202107-25",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202107-25"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5202?format=api",
                    "purl": "pkg:deb/debian/tor@0.3.5.16-1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tor@0.3.5.16-1"
                }
            ],
            "aliases": [
                "CVE-2021-34549"
            ],
            "risk_score": 3.1,
            "exploitability": "0.5",
            "weighted_severity": "6.2",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-33xt-scs6-wkbd"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7299?format=api",
            "vulnerability_id": "VCID-6cne-tp6s-1ueg",
            "summary": "denial of service",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-34550",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00827",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7486",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-34550"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34548",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34548"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34549",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34549"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34550",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34550"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990000",
                    "reference_id": "990000",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990000"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-202106-50",
                    "reference_id": "ASA-202106-50",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-202106-50"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-2075",
                    "reference_id": "AVG-2075",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Medium",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-2075"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202107-25",
                    "reference_id": "GLSA-202107-25",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202107-25"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5202?format=api",
                    "purl": "pkg:deb/debian/tor@0.3.5.16-1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tor@0.3.5.16-1"
                }
            ],
            "aliases": [
                "CVE-2021-34550"
            ],
            "risk_score": 3.1,
            "exploitability": "0.5",
            "weighted_severity": "6.2",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6cne-tp6s-1ueg"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6377?format=api",
            "vulnerability_id": "VCID-aftp-jtpf-tqdv",
            "summary": "multiple issues",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-8823",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00387",
                            "scoring_system": "epss",
                            "scoring_elements": "0.60141",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-8823"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8819",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8819"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8820",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8820"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8821",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8821"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8822",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8822"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8823",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8823"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201712-10",
                    "reference_id": "ASA-201712-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201712-10"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-539",
                    "reference_id": "AVG-539",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-539"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/4932?format=api",
                    "purl": "pkg:deb/debian/tor@0.2.9.16-1~bpo8%2B1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-33xt-scs6-wkbd"
                        },
                        {
                            "vulnerability": "VCID-6cne-tp6s-1ueg"
                        },
                        {
                            "vulnerability": "VCID-aftp-jtpf-tqdv"
                        },
                        {
                            "vulnerability": "VCID-cnd5-m5xd-w7g4"
                        },
                        {
                            "vulnerability": "VCID-h3uy-5hxy-xfej"
                        },
                        {
                            "vulnerability": "VCID-n88a-g5u5-ffhp"
                        },
                        {
                            "vulnerability": "VCID-rz36-7x1c-bket"
                        },
                        {
                            "vulnerability": "VCID-t1jj-fxxa-1qc1"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tor@0.2.9.16-1~bpo8%252B1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5202?format=api",
                    "purl": "pkg:deb/debian/tor@0.3.5.16-1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tor@0.3.5.16-1"
                }
            ],
            "aliases": [
                "CVE-2017-8823"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-aftp-jtpf-tqdv"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6378?format=api",
            "vulnerability_id": "VCID-cnd5-m5xd-w7g4",
            "summary": "multiple issues",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-8822",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00174",
                            "scoring_system": "epss",
                            "scoring_elements": "0.3859",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-8822"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8819",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8819"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8820",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8820"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8821",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8821"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8822",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8822"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8823",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8823"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201712-10",
                    "reference_id": "ASA-201712-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201712-10"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-539",
                    "reference_id": "AVG-539",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-539"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/4932?format=api",
                    "purl": "pkg:deb/debian/tor@0.2.9.16-1~bpo8%2B1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-33xt-scs6-wkbd"
                        },
                        {
                            "vulnerability": "VCID-6cne-tp6s-1ueg"
                        },
                        {
                            "vulnerability": "VCID-aftp-jtpf-tqdv"
                        },
                        {
                            "vulnerability": "VCID-cnd5-m5xd-w7g4"
                        },
                        {
                            "vulnerability": "VCID-h3uy-5hxy-xfej"
                        },
                        {
                            "vulnerability": "VCID-n88a-g5u5-ffhp"
                        },
                        {
                            "vulnerability": "VCID-rz36-7x1c-bket"
                        },
                        {
                            "vulnerability": "VCID-t1jj-fxxa-1qc1"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tor@0.2.9.16-1~bpo8%252B1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5202?format=api",
                    "purl": "pkg:deb/debian/tor@0.3.5.16-1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tor@0.3.5.16-1"
                }
            ],
            "aliases": [
                "CVE-2017-8822"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cnd5-m5xd-w7g4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5308?format=api",
            "vulnerability_id": "VCID-h3uy-5hxy-xfej",
            "summary": "denial of service",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-38385",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00596",
                            "scoring_system": "epss",
                            "scoring_elements": "0.69748",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-38385"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38385",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38385"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-2302",
                    "reference_id": "AVG-2302",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-2302"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202305-11",
                    "reference_id": "GLSA-202305-11",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202305-11"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5202?format=api",
                    "purl": "pkg:deb/debian/tor@0.3.5.16-1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tor@0.3.5.16-1"
                }
            ],
            "aliases": [
                "CVE-2021-38385"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h3uy-5hxy-xfej"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6379?format=api",
            "vulnerability_id": "VCID-n88a-g5u5-ffhp",
            "summary": "multiple issues",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-8820",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00436",
                            "scoring_system": "epss",
                            "scoring_elements": "0.63321",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-8820"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8819",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8819"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8820",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8820"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8821",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8821"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8822",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8822"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8823",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8823"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201712-10",
                    "reference_id": "ASA-201712-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201712-10"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-539",
                    "reference_id": "AVG-539",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-539"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/4932?format=api",
                    "purl": "pkg:deb/debian/tor@0.2.9.16-1~bpo8%2B1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-33xt-scs6-wkbd"
                        },
                        {
                            "vulnerability": "VCID-6cne-tp6s-1ueg"
                        },
                        {
                            "vulnerability": "VCID-aftp-jtpf-tqdv"
                        },
                        {
                            "vulnerability": "VCID-cnd5-m5xd-w7g4"
                        },
                        {
                            "vulnerability": "VCID-h3uy-5hxy-xfej"
                        },
                        {
                            "vulnerability": "VCID-n88a-g5u5-ffhp"
                        },
                        {
                            "vulnerability": "VCID-rz36-7x1c-bket"
                        },
                        {
                            "vulnerability": "VCID-t1jj-fxxa-1qc1"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tor@0.2.9.16-1~bpo8%252B1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5202?format=api",
                    "purl": "pkg:deb/debian/tor@0.3.5.16-1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tor@0.3.5.16-1"
                }
            ],
            "aliases": [
                "CVE-2017-8820"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n88a-g5u5-ffhp"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6380?format=api",
            "vulnerability_id": "VCID-rz36-7x1c-bket",
            "summary": "multiple issues",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-8819",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00291",
                            "scoring_system": "epss",
                            "scoring_elements": "0.52775",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-8819"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8819",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8819"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8820",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8820"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8821",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8821"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8822",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8822"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8823",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8823"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-201712-10",
                    "reference_id": "ASA-201712-10",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-201712-10"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-539",
                    "reference_id": "AVG-539",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "High",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-539"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/4932?format=api",
                    "purl": "pkg:deb/debian/tor@0.2.9.16-1~bpo8%2B1",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-33xt-scs6-wkbd"
                        },
                        {
                            "vulnerability": "VCID-6cne-tp6s-1ueg"
                        },
                        {
                            "vulnerability": "VCID-aftp-jtpf-tqdv"
                        },
                        {
                            "vulnerability": "VCID-cnd5-m5xd-w7g4"
                        },
                        {
                            "vulnerability": "VCID-h3uy-5hxy-xfej"
                        },
                        {
                            "vulnerability": "VCID-n88a-g5u5-ffhp"
                        },
                        {
                            "vulnerability": "VCID-rz36-7x1c-bket"
                        },
                        {
                            "vulnerability": "VCID-t1jj-fxxa-1qc1"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tor@0.2.9.16-1~bpo8%252B1"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5202?format=api",
                    "purl": "pkg:deb/debian/tor@0.3.5.16-1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tor@0.3.5.16-1"
                }
            ],
            "aliases": [
                "CVE-2017-8819"
            ],
            "risk_score": 4.0,
            "exploitability": "0.5",
            "weighted_severity": "8.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rz36-7x1c-bket"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7301?format=api",
            "vulnerability_id": "VCID-t1jj-fxxa-1qc1",
            "summary": "denial of service",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-34548",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00159",
                            "scoring_system": "epss",
                            "scoring_elements": "0.36471",
                            "published_at": "2026-06-04T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-34548"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34548",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34548"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34549",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34549"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34550",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34550"
                },
                {
                    "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990000",
                    "reference_id": "990000",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990000"
                },
                {
                    "reference_url": "https://security.archlinux.org/ASA-202106-50",
                    "reference_id": "ASA-202106-50",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.archlinux.org/ASA-202106-50"
                },
                {
                    "reference_url": "https://security.archlinux.org/AVG-2075",
                    "reference_id": "AVG-2075",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "Medium",
                            "scoring_system": "archlinux",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://security.archlinux.org/AVG-2075"
                },
                {
                    "reference_url": "https://security.gentoo.org/glsa/202107-25",
                    "reference_id": "GLSA-202107-25",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://security.gentoo.org/glsa/202107-25"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/5202?format=api",
                    "purl": "pkg:deb/debian/tor@0.3.5.16-1",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tor@0.3.5.16-1"
                }
            ],
            "aliases": [
                "CVE-2021-34548"
            ],
            "risk_score": 3.1,
            "exploitability": "0.5",
            "weighted_severity": "6.2",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-t1jj-fxxa-1qc1"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": "4.0",
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tor@0.2.9.14-1~bpo8%252B1"
}