Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/507948?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/507948?format=api", "purl": "pkg:apk/alpine/openssh@7.4_p1-r0?arch=s390x&distroversion=v3.13&reponame=main", "type": "apk", "namespace": "alpine", "name": "openssh", "version": "7.4_p1-r0", "qualifiers": { "arch": "s390x", "distroversion": "v3.13", "reponame": "main" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "7.5_p1-r8", "latest_non_vulnerable_version": "8.4_p1-r4", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84679?format=api", "vulnerability_id": "VCID-4fj8-vfgx-pyh9", "summary": "openssh: privilege escalation via Unix domain socket forwarding", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10010.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10010.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10010", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00091", "scoring_system": "epss", "scoring_elements": "0.25826", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00091", "scoring_system": "epss", "scoring_elements": "0.25754", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00091", "scoring_system": "epss", "scoring_elements": "0.25869", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00092", "scoring_system": "epss", "scoring_elements": "0.25867", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00092", "scoring_system": "epss", "scoring_elements": "0.25968", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00092", "scoring_system": "epss", "scoring_elements": "0.25923", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00092", "scoring_system": "epss", "scoring_elements": "0.25864", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00092", "scoring_system": "epss", "scoring_elements": "0.25836", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00092", "scoring_system": "epss", "scoring_elements": "0.25906", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00092", "scoring_system": "epss", "scoring_elements": "0.25958", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10010" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10010", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10010" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:S/C:C/I:C/A:C" }, { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406278", "reference_id": "1406278", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406278" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848715", "reference_id": "848715", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848715" }, { "reference_url": "https://security.archlinux.org/ASA-201612-20", "reference_id": "ASA-201612-20", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201612-20" }, { "reference_url": "https://security.archlinux.org/AVG-110", "reference_id": "AVG-110", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-110" }, { "reference_url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1010", "reference_id": "CVE-2016-10010", "reference_type": "exploit", "scores": [], "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1010" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/40962.txt", "reference_id": "CVE-2016-10010", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/40962.txt" }, { "reference_url": "https://usn.ubuntu.com/3538-1/", "reference_id": "USN-3538-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3538-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/507948?format=api", "purl": "pkg:apk/alpine/openssh@7.4_p1-r0?arch=s390x&distroversion=v3.13&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssh@7.4_p1-r0%3Farch=s390x&distroversion=v3.13&reponame=main" } ], "aliases": [ "CVE-2016-10010" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4fj8-vfgx-pyh9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84680?format=api", "vulnerability_id": "VCID-qt1x-kyuf-gker", "summary": "openssh: Leak of host private key material to privilege-separated child process via realloc()", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10011.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10011.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10011", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03889", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03879", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03929", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03899", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03928", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03937", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03948", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03954", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03978", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03946", "published_at": "2026-04-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10011" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10011", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10011" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "1", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:H/Au:S/C:P/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406286", "reference_id": "1406286", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406286" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848716", "reference_id": "848716", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848716" }, { "reference_url": "https://security.archlinux.org/ASA-201612-20", "reference_id": "ASA-201612-20", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201612-20" }, { "reference_url": "https://security.archlinux.org/AVG-110", "reference_id": "AVG-110", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-110" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2029", "reference_id": "RHSA-2017:2029", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2029" }, { "reference_url": "https://usn.ubuntu.com/3538-1/", "reference_id": "USN-3538-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3538-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/507948?format=api", "purl": "pkg:apk/alpine/openssh@7.4_p1-r0?arch=s390x&distroversion=v3.13&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssh@7.4_p1-r0%3Farch=s390x&distroversion=v3.13&reponame=main" } ], "aliases": [ "CVE-2016-10011" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qt1x-kyuf-gker" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84681?format=api", "vulnerability_id": "VCID-u21t-acnr-dub2", "summary": "openssh: Bounds check can be evaded in the shared memory manager used by pre-authentication compression support", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10012.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10012.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10012", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05689", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05742", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05768", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05746", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05738", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05733", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05702", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.05871", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.05904", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.05837", "published_at": "2026-04-01T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10012" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10012", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10012" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:S/C:P/I:P/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406293", "reference_id": "1406293", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406293" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848717", "reference_id": "848717", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848717" }, { "reference_url": "https://security.archlinux.org/ASA-201612-20", "reference_id": "ASA-201612-20", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201612-20" }, { "reference_url": "https://security.archlinux.org/AVG-110", "reference_id": "AVG-110", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-110" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2029", "reference_id": "RHSA-2017:2029", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2029" }, { "reference_url": "https://usn.ubuntu.com/3538-1/", "reference_id": "USN-3538-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3538-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/507948?format=api", "purl": "pkg:apk/alpine/openssh@7.4_p1-r0?arch=s390x&distroversion=v3.13&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssh@7.4_p1-r0%3Farch=s390x&distroversion=v3.13&reponame=main" } ], "aliases": [ "CVE-2016-10012" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-u21t-acnr-dub2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84678?format=api", "vulnerability_id": "VCID-v1vq-wecd-1ud9", "summary": "openssh: loading of untrusted PKCS#11 modules in ssh-agent", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10009.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10009.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10009", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.815", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81602", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81572", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81565", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81511", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81533", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81531", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81559", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81564", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81584", "published_at": "2026-04-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10009" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10009", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10009" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:S/C:P/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406269", "reference_id": "1406269", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406269" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848714", "reference_id": "848714", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848714" }, { "reference_url": "https://security.archlinux.org/ASA-201612-20", "reference_id": "ASA-201612-20", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201612-20" }, { "reference_url": "https://security.archlinux.org/AVG-110", "reference_id": "AVG-110", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-110" }, { "reference_url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1009", "reference_id": "CVE-2016-10009", "reference_type": "exploit", "scores": [], "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1009" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40963.txt", "reference_id": "CVE-2016-10009", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40963.txt" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2029", "reference_id": "RHSA-2017:2029", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2029" }, { "reference_url": "https://usn.ubuntu.com/3538-1/", "reference_id": "USN-3538-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3538-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/507948?format=api", "purl": "pkg:apk/alpine/openssh@7.4_p1-r0?arch=s390x&distroversion=v3.13&reponame=main", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssh@7.4_p1-r0%3Farch=s390x&distroversion=v3.13&reponame=main" } ], "aliases": [ "CVE-2016-10009" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v1vq-wecd-1ud9" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openssh@7.4_p1-r0%3Farch=s390x&distroversion=v3.13&reponame=main" }